Overview

overview

7

Static

static

3

vice_private_omg.exe

windows7-x64

7

vice_private_omg.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    92s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/06/2024, 23:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    vice_private_omg.exe
  • Size 7.7MB
  • Sample240608-2y4mkshf5y
  • SHA256 42e89a2d2c5a3689493b3763b11c393420af88bbe12915a638794710f364faad
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\vice_private_omg.exe
    "C:\Users\Admin\AppData\Local\Temp\vice_private_omg.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3756
    • C:\Users\Admin\AppData\Local\Temp\vice_private_omg.exe
      "C:\Users\Admin\AppData\Local\Temp\vice_private_omg.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:4828

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\VCRUNTIME140.dll
        • Size 87KB
        • SHA256 bf5ff4603557c9959acec995653d052d9054ad4826df967974efd2f377c723d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_asyncio.pyd
        • Size 71KB
        • SHA256 24a0be8d4c4c6260720f89e0a99840305f182d06220306c70785a1bfc8903bb4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_bz2.pyd
        • Size 87KB
        • SHA256 466d21407f5b589b20c464c51bfe2be420e5a586a7f394908448545f16b08b33
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _contextvars.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_contextvars.pyd
        • Size 22KB
        • SHA256 94b38784f2349f803cb62abb8b8fd9f2352c9dc891acf8b3d2f1b8b745b7d79b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_ctypes.pyd
        • Size 129KB
        • SHA256 09887f07f4316057d3c87e3a907c2235dc6547e54ed4f5f9125f99e547d58bce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_hashlib.pyd
        • Size 38KB
        • SHA256 bdf4a536f783958357d2e0055debdc3cf7790ee28beb286452eec0354a346bdc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_lzma.pyd
        • Size 251KB
        • SHA256 a4cba6d82369c57cb38a32d4dacb99225f58206d2dd9883f6fc0355d6ddaec3d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_overlapped.pyd
        • Size 43KB
        • SHA256 2d30cd0be4a129a88fba368c0b14957905b3112869c8133b8f7e78dcf7edf1e9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_socket.pyd
        • Size 74KB
        • SHA256 4ba5d0e236711bdcb29ce9c3138406f7321bd00587b6b362b4ace94379cf52d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\_ssl.pyd
        • Size 120KB
        • SHA256 45c8b99ba9e832cab85e9d45b5601b7a1d744652e7f756ec6a6091e1d8398dd4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _frozenlist.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\aiohttp\_frozenlist.cp37-win_amd64.pyd
        • Size 63KB
        • SHA256 bac33e0f292483046c9aa01c5a4d86f68f2c3ab4240845c65756158ce393390b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _helpers.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\aiohttp\_helpers.cp37-win_amd64.pyd
        • Size 47KB
        • SHA256 0575c621abb17eaaf6914dc5e1415da453d89c5e4ce0ee45c14832bc425e8b3b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _http_parser.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\aiohttp\_http_parser.cp37-win_amd64.pyd
        • Size 232KB
        • SHA256 296a86f86018c9c868b7bb39ac1e29852cceba1623295994d8fc515335cf0545
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _http_writer.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\aiohttp\_http_writer.cp37-win_amd64.pyd
        • Size 41KB
        • SHA256 debb0e712b1b6fb98ce65094ab564309b962271c6b6a13da24a0bfd5d3a32b1e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _websocket.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\aiohttp\_websocket.cp37-win_amd64.pyd
        • Size 27KB
        • SHA256 b44aa794b88eecc2699383dad0319dafbd031e0ee2edef15965134808443ea5a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\base_library.zip
        • Size 994KB
        • SHA256 b088bed6fdf8b805a782f24bff4546b1cbf57a9098cec23a288fce2ad7b6bdc5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-1_1-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\libcrypto-1_1-x64.dll
        • Size 2.4MB
        • SHA256 2a57183839c3e9cc4618fb1994c40e47672a8b6daffaa76c5f89cf2542b02c2f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-1_1-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\libssl-1_1-x64.dll
        • Size 517KB
        • SHA256 9d35d8dd9854a4d4205ae4eafe28c92f8d0e3ac7c494ac4a6a117f6e4b45170c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _multidict.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\multidict\_multidict.cp37-win_amd64.pyd
        • Size 45KB
        • SHA256 a874aa34a46df245bfc6c5ef5b213deca84e8e051c4f022b2f0463f12b6da56f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python37.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\python37.dll
        • Size 3.7MB
        • SHA256 17c29e6188b022f795092d72a1fb58630a7c723d70ac5bc3990b20cd2eb2a51f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\select.pyd
        • Size 26KB
        • SHA256 56d1a971762a1a56a73bdf64727e416ffa9395b8af4efcd218f5203d744e1268
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\ucrtbase.dll
        • Size 992KB
        • SHA256 8a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\unicodedata.pyd
        • Size 1.0MB
        • SHA256 71b13fd922190081d3aeec8628bd72858cc69ee553e16bf3da412f535108d0e4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _quoting_c.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI37562\yarl\_quoting_c.cp37-win_amd64.pyd
        • Size 95KB
        • SHA256 5264fcff96ca9558663e9cbe649a11d9261859f7d9056775694a0452c6c11845
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download