Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/06/2024, 05:37

General

  • Target

    bea6b0dab7ff1ad8c763a682edc09473de39eeadfc9d1b607f85cc4e1614815f.exe

  • Size

    99KB

  • MD5

    f57b7c377a24ad77c24686661fd15664

  • SHA1

    f4099d4e3a080471d3b0f22b2094106fb21f749a

  • SHA256

    bea6b0dab7ff1ad8c763a682edc09473de39eeadfc9d1b607f85cc4e1614815f

  • SHA512

    d48bd8f3a2bd733193589d9f35f9016dd450528eda56795bc3a1c5f9fbceddaa6f110708cec6ca32b1719afd85b041651833bb222e3cb3845526cedbef9c080a

  • SSDEEP

    768:xGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyk:szqsQ5PIt4+/yfeB6r6YcOik5h36lh

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\bea6b0dab7ff1ad8c763a682edc09473de39eeadfc9d1b607f85cc4e1614815f.exe
    "C:\Users\Admin\AppData\Local\Temp\bea6b0dab7ff1ad8c763a682edc09473de39eeadfc9d1b607f85cc4e1614815f.exe"
    1⤵
      PID:824
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4104 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4356

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\My Downloads\Dark Age Of Camelot Shrouded Isles Key Generator.exe

              Filesize

              99KB

              MD5

              25bd639240d2d3f3ccf31c7ec67f8fdd

              SHA1

              b95e02b734faad0ac1555c6e2c250ab586350938

              SHA256

              08a3ad7a97c7499c9ab3c5a74806ca531f94260a16db19b1ec5cbf9657f78f4a

              SHA512

              fbfdf79bf0dfff4f4be34888d0726b23e7b1645151c6549b19c02bac655317839ae42448fda0fa9388389009dbd0eb6ff84996e4b6ea06ca7d3e2a292d2ea9e2

            • memory/824-0-0x0000000000400000-0x000000000041B000-memory.dmp

              Filesize

              108KB

            • memory/824-101-0x0000000000400000-0x000000000041B000-memory.dmp

              Filesize

              108KB