Overview

overview

10

Static

static

7

24.exe

windows7-x64

10

24.exe

windows10-2004-x64

10

4.exe

windows7-x64

10

4.exe

windows10-2004-x64

10

7.exe

windows7-x64

10

7.exe

windows10-2004-x64

10

Order.exe

windows7-x64

10

Order.exe

windows10-2004-x64

10

load2.exe

windows7-x64

load2.exe

windows10-2004-x64

spart.exe

windows7-x64

7

spart.exe

windows10-2004-x64

7

swift.exe

windows7-x64

10

swift.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-05-2024 17:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    spart.exe

  • Size

    268KB

  • MD5

    6faadd4018893fb1402df8f2693a4fb1

  • SHA1

    e223d93bc1cc7f41b72f2c1ca9cadf0e4c3abd26

  • SHA256

    b3aba8475a844540f9acb081574b2c83f1cb954cb09f3e8b03660881e501ec53

  • SHA512

    9498a96f452d4c176218961559bc27aa1f1ce42b953211d19805618c74ceb6da8571f587c018e6971d077f9e0fe17a1695f080c7da866542e825f521c6eeef74

  • SSDEEP

    3072:jWNVz+FX2UXCQh1pGE8IiGS3AegXNzS5f88LmdwrmKcw3MpODAmuAbeuozIrO1qP:66FX2wF8IidKXNKidw6KlUAiuokrGqP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\spart.exe
    "C:\Users\Admin\AppData\Local\Temp\spart.exe"
    1⤵
      PID:1236

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1236-0-0x0000000000400000-0x000000000049D000-memory.dmp
      Filesize

      628KB

      Download
    • memory/1236-1-0x0000000000830000-0x0000000000831000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1236-2-0x0000000000400000-0x000000000049D000-memory.dmp
      Filesize

      628KB

      Download
    • memory/1236-4-0x0000000000830000-0x0000000000831000-memory.dmp
      Filesize

      4KB

      Download