Overview

overview

8

Static

static

8

Builder.bat

windows7-x64

1

Builder.bat

windows10-2004-x64

1

Components...OBF.py

windows7-x64

3

Components...OBF.py

windows10-2004-x64

3

Components/loader.py

windows7-x64

3

Components/loader.py

windows10-2004-x64

3

Components...ess.py

windows7-x64

3

Components...ess.py

windows10-2004-x64

3

Components/process.py

windows7-x64

3

Components/process.py

windows10-2004-x64

3

Components/rar.exe

windows7-x64

3

Components/rar.exe

windows10-2004-x64

3

Components/run.bat

windows7-x64

1

Components/run.bat

windows10-2004-x64

1

Components...ief.py

windows7-x64

3

Components...ief.py

windows10-2004-x64

3

Components/stub.py

windows7-x64

3

Components/stub.py

windows10-2004-x64

3

Components/upx.exe

windows7-x64

7

Components/upx.exe

windows10-2004-x64

7

Extras/unb...tes.py

windows7-x64

3

Extras/unb...tes.py

windows10-2004-x64

3

env/Script...xa.dll

windows7-x64

1

env/Script...xa.dll

windows10-2004-x64

1

env/Script...lt.exe

windows7-x64

1

env/Script...lt.exe

windows10-2004-x64

1

env/Script...64.exe

windows7-x64

1

env/Script...64.exe

windows10-2004-x64

1

env/Script...En.exe

windows7-x64

1

env/Script...En.exe

windows10-2004-x64

1

env/Script...64.exe

windows7-x64

1

env/Script...64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-06-2024 00:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Components/upx.exe

  • Size

    525KB

  • MD5

    8a98406e32ed6139bd9e75342d452948

  • SHA1

    ed77737b88a7351d0bc5f542ddb7ce84f8f95588

  • SHA256

    a4240ea0e8a916d15f8391edef9705ab4de1f516dd360f0a336c5358686d434b

  • SHA512

    f5b17975560d97308a6ee66845225715e82bade9df7bc36821c76fe67fcf8d22929bf21b85e28dd11b7399d0109ab1f3786fd2010c2e5023d3a93d2bd5cf678b

  • SSDEEP

    12288:fOHsWPQsJdQmiR0eYG16fyP8RHzS75CaNgMYqIW7I2:2QmiWK16rRHzS7U6ip2

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\Components\upx.exe
    "C:\Users\Admin\AppData\Local\Temp\Components\upx.exe"
    1⤵
      PID:1320

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1320-0-0x0000000000400000-0x0000000000603000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/1320-2-0x0000000000400000-0x0000000000603000-memory.dmp

      Filesize

      2.0MB

      Download