Overview

overview

10

Static

static

10

d6e93f2d4c...83.exe

windows7-x64

9

d6e93f2d4c...83.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    141s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-06-2024 03:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d6e93f2d4c6ff01a5ddfa549c7e997e312fe78dd07ab74746dd649ec69b98283.exe

  • Size

    83KB

  • MD5

    7cc271d7401e55b348259ed696f2cb45

  • SHA1

    f22076d2143db286da97e6e95437498a34116ca3

  • SHA256

    d6e93f2d4c6ff01a5ddfa549c7e997e312fe78dd07ab74746dd649ec69b98283

  • SHA512

    264cbbde8bf9f7d2ca7c1f76766b9a2475dd7c56e42c158a90e289955be86bbe1273ed2bb98e99168e0483ae35c024ead0a1e49c0ac77027a9a608712013fe2a

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+oK:LJ0TAz6Mte4A+aaZx8EnCGVuo

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 7 IoCs
  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\d6e93f2d4c6ff01a5ddfa549c7e997e312fe78dd07ab74746dd649ec69b98283.exe
    "C:\Users\Admin\AppData\Local\Temp\d6e93f2d4c6ff01a5ddfa549c7e997e312fe78dd07ab74746dd649ec69b98283.exe"
    1⤵
      PID:4572
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4408,i,6870419347051655189,5491911050420577193,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8
      1⤵
        PID:716

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\rifaien2-ROrz0qsrs4s3JG9e.exe
        Filesize

        83KB

        MD5

        3abbab67a522701034712513ac7d5191

        SHA1

        8e736e5736747f83a3765aa35e9db3b155b57a55

        SHA256

        9ea67d824a2dc2cfefe010b3171153673e02f92b535ac6ed708009a61f6dc2b3

        SHA512

        2dc184e1d9dd8e34602ccf64c97e07c3a17d1f6c537aece2afd9169d0d15db62ae4c445c3b5a5aad7c361fa6c8b1d08e97f4ef94b470d22263141b8cb3ce1fbd

        Download Submit

      • memory/4572-0-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4572-1-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4572-7-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4572-14-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4572-21-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4572-28-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download