Overview

overview

10

Static

static

10

6da72c22bc...ba.exe

windows7-x64

9

6da72c22bc...ba.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    140s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/05/2024, 22:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    6da72c22bc7d478049804e1e7e587f07ed15f71aab9386803f8292e8aaf4e4ba.exe

  • Size

    4.3MB

  • MD5

    76f4edb187bf5b894da5f4f7f97ff3bd

  • SHA1

    6420e85c104c7d0abee17c7c91755b102c4f2c47

  • SHA256

    6da72c22bc7d478049804e1e7e587f07ed15f71aab9386803f8292e8aaf4e4ba

  • SHA512

    9262f57aa095cae8d5813d0492aec8fded31c12fd9b67e166a996ba287f8eacda0e2310e70d249e2651c95b8d74caeb56aa7b4f033ab95606a35146c064406c6

  • SSDEEP

    98304:grZ0PhZbnhKvppVlZL99a3jnbU+cqzuh7w921f5OJxX:kZm7hKvZlJ9QzgDIlxX

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\6da72c22bc7d478049804e1e7e587f07ed15f71aab9386803f8292e8aaf4e4ba.exe
    "C:\Users\Admin\AppData\Local\Temp\6da72c22bc7d478049804e1e7e587f07ed15f71aab9386803f8292e8aaf4e4ba.exe"
    1⤵
      PID:2428
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4024 --field-trial-handle=2280,i,1836084024518340990,18250262151825427757,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:5504

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2428-0-0x0000000000400000-0x000000000040B000-memory.dmp

              Filesize

              44KB

              Download

            • memory/2428-1-0x0000000000400000-0x000000000040B000-memory.dmp

              Filesize

              44KB

              Download