Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-06-2024 00:25

General

  • Target

    2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe

  • Size

    331KB

  • MD5

    261914484ac67e6eb5d94084a559c0b0

  • SHA1

    acd8ad613ec4f1094af337c59063847c75b4a19b

  • SHA256

    efb858ac819d817124ae0c658ae351da8c9bce54c7b36708affa22f4676f02bb

  • SHA512

    a4efd5e0f72bd01aba8761195757602520ac2e9328356e99360ea533e94ecc79f8b6b660cef157562b11d6e5d59cb464d9493b3d4de30f1280a6b5834c4cdb3f

  • SSDEEP

    6144:dgj1SzLLw09lIbrgsYLbxkPbiXncmurMQL0CZWxEWlz+N6Zt5ZijH4t6fl6g8+Ng:dgj1EPXCP1mcBk+YZU4t/g8kS9GS

Score
10/10

Malware Config

Signatures

  • Detect Maui ransomware 1 IoCs
  • Maui Ransomware

    Ransomware-as-a-Service which first appeared in 2022.

  • UPX dump on OEP (original entry point) 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe"
    1⤵
      PID:1988

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1988-0-0x0000000000C60000-0x0000000000D2E000-memory.dmp

      Filesize

      824KB

    • memory/1988-2-0x0000000000C60000-0x0000000000D2E000-memory.dmp

      Filesize

      824KB