Overview

overview

7

Static

static

3

funny.exe

windows7-x64

7

funny.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    123s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/06/2024, 15:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    funny.exe
  • Size 79.2MB
  • Sample240607-sq37eabc82
  • SHA256 aa870b97481ddb626bb5f6791a60a84e2de1e65f99299040f0317d99eaa7dd21
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 32 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\funny.exe
    "C:\Users\Admin\AppData\Local\Temp\funny.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4188
    • C:\Users\Admin\AppData\Local\Temp\funny.exe
      "C:\Users\Admin\AppData\Local\Temp\funny.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:8
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:1836
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3416,i,13879737908471496610,15335851594401413307,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
      1⤵
        PID:740

      Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            _imaging.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\PIL\_imaging.cp310-win_amd64.pyd
            • Size 2.5MB
            • SHA256 67c0e06bde830a9552ea601dd271387ea0ac5f32308f3cd399693c3b98389960
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            qtdeclarative_en.qm
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\PyQt5\Qt5\translations\qtdeclarative_en.qm
            • Size 16B
            • SHA256 9959b510b15d18937848ad13007e30459d2e993c67e564badbfc18f935695c85
            • MD5 SHA1 SHA512
            Submit Download

            VCRUNTIME140.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\VCRUNTIME140.dll
            • Size 95KB
            • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _asyncio.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_asyncio.pyd
            • Size 60KB
            • SHA256 2c9f565254e4b2744d52b58f4960d5da1330c7846059b772044e4415804d933e
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _bz2.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_bz2.pyd
            • Size 78KB
            • SHA256 31dd9bfb64b1bee8faf925296028e2af907e6d933a83ddc570ebc82d11c43cfb
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _cffi_backend.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_cffi_backend.cp310-win_amd64.pyd
            • Size 177KB
            • SHA256 2093e7e4f5359b38f0819bdef8314fda332a1427f22e09afc416e1edd5910fe1
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _ctypes.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_ctypes.pyd
            • Size 117KB
            • SHA256 b545db2339ae74c523363b38835e8324799720f744c64e7142ddd48e4b619b68
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _hashlib.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_hashlib.pyd
            • Size 60KB
            • SHA256 9da79abfed52c7432a25a513f14134f3782c73ec7142e2d90223610eaef54303
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _lzma.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_lzma.pyd
            • Size 151KB
            • SHA256 75d450e973cd1ccbd0f9a35ba0d7e6d644125eb311cc432bb424a299d9a52ee0
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _overlapped.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_overlapped.pyd
            • Size 45KB
            • SHA256 622171218fab2952c569acdbf0489d0098fa0664f61624d1c4f040410731be41
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _queue.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_queue.pyd
            • Size 27KB
            • SHA256 827a07b27121200ed9fb2e9efd13ccbf57ca7d32d9d9d1619f1c303fb4d607b7
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _socket.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_socket.pyd
            • Size 74KB
            • SHA256 9558dda6a3f6ad0c3091d643e2d3bf5bf20535904f691d2bdb2ce78edf46c2da
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _ssl.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_ssl.pyd
            • Size 153KB
            • SHA256 41278e309382c79356c1a4daf6dbb5819441d0c6e64981d031cda077bb6f1f79
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _uuid.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\_uuid.pyd
            • Size 21KB
            • SHA256 4ed9e84185b34923193f84255f7aa6ca6e6312c490b32de4acf0a0facbabdb5b
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _helpers.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\aiohttp\_helpers.cp310-win_amd64.pyd
            • Size 53KB
            • SHA256 5221391fa47ac3180ab77c5d3b9a15fc8c8087a5bd531daf47c3a4fecffc00b9
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _http_parser.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\aiohttp\_http_parser.cp310-win_amd64.pyd
            • Size 248KB
            • SHA256 94eca40f1d8dfbbbdeff185a006925b4da53a7c86c2c3bc126110ab21bcedfe4
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _http_writer.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\aiohttp\_http_writer.cp310-win_amd64.pyd
            • Size 48KB
            • SHA256 225f61a5e5b19f4320370523fd28e7166d3a65c69505a807573d9a18da641450
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _websocket.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\aiohttp\_websocket.cp310-win_amd64.pyd
            • Size 35KB
            • SHA256 07e09075ef5a1bf2969381a5cadf07cdd1892b67ce7b6f643b5225f06d57e19f
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            base_library.zip
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\base_library.zip
            • Size 1.0MB
            • SHA256 d0010c19204ca779e579dcbc41b123a5929737d5b718ef0204ed480b5e93813e
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _frozenlist.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\frozenlist\_frozenlist.cp310-win_amd64.pyd
            • Size 84KB
            • SHA256 5c204f6966526af4dc0c0d6d29909b6f088c4fa781464f2948414d833b03094d
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            libcrypto-1_1.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\libcrypto-1_1.dll
            • Size 3.3MB
            • SHA256 9c0a0a11629cced6a064932e95a0158ee936739d75a56338702fed97cb0bad55
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            libffi-7.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\libffi-7.dll
            • Size 32KB
            • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            libssl-1_1.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\libssl-1_1.dll
            • Size 682KB
            • SHA256 ed1c8769f5096afd000fc730a37b11177fcf90890345071ab7fbceac684d571f
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _multidict.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\multidict\_multidict.cp310-win_amd64.pyd
            • Size 45KB
            • SHA256 74ec52418c5d38a63add94228c6f68cf49519666ae8bcb7ac199f7d539d8612c
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _sodium.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\nacl\_sodium.pyd
            • Size 340KB
            • SHA256 d733c23c6a4b21625a4ff07f6562ba882bcbdb0f50826269419d8de0574f88cd
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _psutil_windows.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\psutil\_psutil_windows.pyd
            • Size 65KB
            • SHA256 e10b73d6e13a5ae2624630f3d8535c5091ef403db6a00a2798f30874938ee996
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            pyexpat.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\pyexpat.pyd
            • Size 191KB
            • SHA256 e41cff213307b232e745d9065d057bcf36508f3a7150c877359800f2c5f97cfc
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            python3.DLL
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\python3.DLL
            • Size 61KB
            • SHA256 a1c5c6e4873aa53d75b35c512c1cbadf39315deeec21a3ada72b324551f1f769
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            python310.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\python310.dll
            • Size 4.2MB
            • SHA256 5783c5c5a3ffce181691f19d27de376a03010d32e41360b72bcdbd28467cfcc5
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            select.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\select.pyd
            • Size 26KB
            • SHA256 149427a8d58373351955ee01a1d35b5ab7e4c6ac1a312daa9ba8c72b7e5ac8a4
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            unicodedata.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\unicodedata.pyd
            • Size 1.1MB
            • SHA256 0f27f26d1faa4f76d4b9d79ad572a3d4f3bbe8020e2208d2f3b9046e815b578a
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            _quoting_c.cp310-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI41882\yarl\_quoting_c.cp310-win_amd64.pyd
            • Size 93KB
            • SHA256 eefb46501ef97baf29a93304f58674e70f5ccecafb183f230e5ce7872a852f56
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download