2897504493313ee7f70d39a27106a69219ed52087af95fa95feca23986f855a2

Resubmissions

06/07/2024, 10:58

240706-m25lqaxapk10

13/06/2024, 13:02

240613-p99xhszdnb10

13/06/2024, 13:01

240613-p9hs2atfpr10

13/06/2024, 12:56

240613-p6sttstepj10

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
13/06/2024, 13:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Venom Vip Chc/Venom CHC .exe
Size 7.6MB
Sample240613-p9hs2atfpr
SHA256 51f8c411a9412866a3f23a89efc44882ae433ceb4b7eb5a07cc8f4beec9f4abf
MD5 6d4a06d15be9d7be4bac8c1f22bb2634
SHA1 872f23ad2cb9179b83543e4459ea73fad3406ed2
SHA512 8bf2a879c26938f099d8b86c8dc0867ada5d920ff36107be0ede80d7b1e0c59eaa1ad8b134cbc8acc58325330a33fb14671eec0a8a4e08decdd35063ddad6ad0
SSDEEP 196608:jrB40cDewdLjv+bhqNVoBKUh8mz4Iv9Plu1D7Ay:jieoL+9qz8/b4IzuRAy
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2616	Venom CHC .exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x000600000001737e-21.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 2616	2088	Venom CHC .exe	28
PID 2088 wrote to memory of 2616	2088	Venom CHC .exe	28
PID 2088 wrote to memory of 2616	2088	Venom CHC .exe	28

C:\Users\Admin\AppData\Local\Temp\Venom Vip Chc\Venom CHC .exe
"C:\Users\Admin\AppData\Local\Temp\Venom Vip Chc\Venom CHC .exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Users\Admin\AppData\Local\Temp\Venom Vip Chc\Venom CHC .exe
  "C:\Users\Admin\AppData\Local\Temp\Venom Vip Chc\Venom CHC .exe"
  2⤵
  - Loads dropped DLL
  PID:2616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

python311.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20882\python311.dll
Size 1.6MB
SHA256 02c665f77db6b255fc62f978aedbe2092b7ef1926836290da68fd838dbf2a9f2
MD5 0b66c50e563d74188a1e96d6617261e8
SHA1 cfd778b3794b4938e584078cbfac0747a8916d9e
SHA512 37d710cb5c0ceb5957d11b61684cfbc65951c1d40ab560f3f3cb8feca42f9d43bd981a0ff44c3cb7562779264f18116723457e79e0e23852d7638b1a954a258f
SSDEEP 24576:qJY99sOZi/8N8C1CSIJyR4ZRE1Rqq/uQivcHe2Bg5Cmek5CP7uP6zohpLGLZFkh2:FjZiEN8p6ivZUHe2BgcpP7uaor6
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2616-23-0x000007FEF5780000-0x000007FEF5D69000-memory.dmp

Download