Analysis
- max time kernel
148s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
16/06/2024, 17:29
General
- Target block_infection.exe
- Size 72.4MB
- Sample240616-v232wszgqa
- SHA256 d62fec1e883f6f991f772d8cab20f1fcdf4547ea212baf1a94aeca2fe66653ee
Malware Config
Signatures
- Loads dropped DLL 30 IoCs
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\block_infection.exe"C:\Users\Admin\AppData\Local\Temp\block_infection.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\block_infection.exe"C:\Users\Admin\AppData\Local\Temp\block_infection.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
base_library.zip
config-3.py
config.py
libcrypto-1_1.dll
libffi-7.dll
libopenblas64__v0.3.21-gcc_10_3_0.dll
libssl-1_1.dll
_multiarray_tests.cp310-win_amd64.pyd
_multiarray_umath.cp310-win_amd64.pyd
_pocketfft_internal.cp310-win_amd64.pyd
_umath_linalg.cp310-win_amd64.pyd
_bounded_integers.cp310-win_amd64.pyd
_common.cp310-win_amd64.pyd
_generator.cp310-win_amd64.pyd
_mt19937.cp310-win_amd64.pyd
_pcg64.cp310-win_amd64.pyd
_philox.cp310-win_amd64.pyd
_sfc64.cp310-win_amd64.pyd
bit_generator.cp310-win_amd64.pyd
mtrand.cp310-win_amd64.pyd
pyexpat.pyd
python3.DLL
python310.dll
select.pyd
memory/3280-1236-0x00007FF998CA0000-0x00007FF998CBA000-memory.dmp
memory/3280-1244-0x00007FF9920C0000-0x00007FF992526000-memory.dmp
memory/3280-1195-0x00007FF9A2B20000-0x00007FF9A2B39000-memory.dmp
memory/3280-1198-0x00007FF98FB70000-0x00007FF991A5B000-memory.dmp
memory/3280-1189-0x00007FF9A5FA0000-0x00007FF9A5FC4000-memory.dmp
memory/3280-1190-0x00007FF9A24C0000-0x00007FF9A24EE000-memory.dmp
memory/3280-1205-0x00007FF9A23B0000-0x00007FF9A23D2000-memory.dmp
memory/3280-1191-0x00007FF9A2400000-0x00007FF9A24B8000-memory.dmp
memory/3280-1182-0x00007FF9920C0000-0x00007FF992526000-memory.dmp
memory/3280-1209-0x00007FF9A2AD0000-0x00007FF9A2AFC000-memory.dmp
memory/3280-1211-0x00007FF9A1EF0000-0x00007FF9A1F84000-memory.dmp
memory/3280-1184-0x00007FF991D40000-0x00007FF9920B9000-memory.dmp
memory/3280-1210-0x00007FF9A1F90000-0x00007FF9A1FB4000-memory.dmp
memory/3280-1204-0x00007FF9A23E0000-0x00007FF9A23F9000-memory.dmp
memory/3280-1183-0x00007FF9A24F0000-0x00007FF9A2505000-memory.dmp
memory/3280-1177-0x00007FF9A6040000-0x00007FF9A604D000-memory.dmp
memory/3280-1226-0x00007FF9A24F0000-0x00007FF9A2505000-memory.dmp
memory/3280-1174-0x00007FF9A2860000-0x00007FF9A2895000-memory.dmp
memory/3280-1170-0x00007FF9A2B00000-0x00007FF9A2B18000-memory.dmp
memory/3280-1237-0x00007FF9930D0000-0x00007FF993178000-memory.dmp
memory/3280-1171-0x00007FF9A2AD0000-0x00007FF9A2AFC000-memory.dmp
memory/3280-1235-0x00007FF998C80000-0x00007FF998C93000-memory.dmp
memory/3280-1166-0x00007FF9A6DD0000-0x00007FF9A6DDD000-memory.dmp
memory/3280-1232-0x00007FF9A1BA0000-0x00007FF9A1BB7000-memory.dmp
memory/3280-1231-0x00007FF9A1BC0000-0x00007FF9A1BD9000-memory.dmp
memory/3280-1230-0x00007FF991D40000-0x00007FF9920B9000-memory.dmp
memory/3280-1162-0x00007FF9A2B20000-0x00007FF9A2B39000-memory.dmp
memory/3280-1159-0x00007FF9A9FB0000-0x00007FF9A9FBF000-memory.dmp
memory/3280-1225-0x00007FF9A1E40000-0x00007FF9A1E80000-memory.dmp
memory/3280-1156-0x00007FF9A5FA0000-0x00007FF9A5FC4000-memory.dmp
memory/3280-1216-0x00007FF9A1EC0000-0x00007FF9A1EEB000-memory.dmp
memory/3280-1149-0x00007FF9920C0000-0x00007FF992526000-memory.dmp
memory/3280-1220-0x00007FF9A1E80000-0x00007FF9A1EB3000-memory.dmp
memory/3280-1240-0x00007FF98FB70000-0x00007FF991A5B000-memory.dmp
memory/3280-1241-0x00007FF9A24C0000-0x00007FF9A24EE000-memory.dmp
memory/3280-1242-0x00007FF9A2400000-0x00007FF9A24B8000-memory.dmp
memory/3280-1243-0x00007FF991A60000-0x00007FF991D31000-memory.dmp
memory/3280-1197-0x00007FF991A60000-0x00007FF991D31000-memory.dmp
memory/3280-1270-0x00007FF9930D0000-0x00007FF993178000-memory.dmp
memory/3280-1269-0x00007FF998C80000-0x00007FF998C93000-memory.dmp
memory/3280-1268-0x00007FF998CA0000-0x00007FF998CBA000-memory.dmp
memory/3280-1267-0x00007FF9A1BA0000-0x00007FF9A1BB7000-memory.dmp
memory/3280-1266-0x00007FF9A1BC0000-0x00007FF9A1BD9000-memory.dmp
memory/3280-1263-0x00007FF9A1EC0000-0x00007FF9A1EEB000-memory.dmp
memory/3280-1262-0x00007FF9A1EF0000-0x00007FF9A1F84000-memory.dmp
memory/3280-1247-0x00007FF9A2B20000-0x00007FF9A2B39000-memory.dmp
memory/3280-1245-0x00007FF9A5FA0000-0x00007FF9A5FC4000-memory.dmp
memory/3280-1387-0x00007FF9A6040000-0x00007FF9A604D000-memory.dmp
memory/3280-1404-0x00007FF991D40000-0x00007FF9920B9000-memory.dmp
memory/3280-1403-0x00007FF998C80000-0x00007FF998C93000-memory.dmp
memory/3280-1402-0x00007FF9930D0000-0x00007FF993178000-memory.dmp
memory/3280-1401-0x00007FF9A1BA0000-0x00007FF9A1BB7000-memory.dmp
memory/3280-1400-0x00007FF9A1E80000-0x00007FF9A1EB3000-memory.dmp
memory/3280-1399-0x00007FF9A1BC0000-0x00007FF9A1BD9000-memory.dmp
memory/3280-1398-0x00007FF9A1EC0000-0x00007FF9A1EEB000-memory.dmp
memory/3280-1397-0x00007FF9A1EF0000-0x00007FF9A1F84000-memory.dmp
memory/3280-1396-0x00007FF9A1F90000-0x00007FF9A1FB4000-memory.dmp
memory/3280-1395-0x00007FF9A23B0000-0x00007FF9A23D2000-memory.dmp
memory/3280-1394-0x00007FF9A23E0000-0x00007FF9A23F9000-memory.dmp
memory/3280-1405-0x00007FF98FB70000-0x00007FF991A5B000-memory.dmp
memory/3280-1393-0x00007FF998CA0000-0x00007FF998CBA000-memory.dmp
memory/3280-1392-0x00007FF991A60000-0x00007FF991D31000-memory.dmp
memory/3280-1391-0x00007FF9A5FA0000-0x00007FF9A5FC4000-memory.dmp
memory/3280-1390-0x00007FF9A24C0000-0x00007FF9A24EE000-memory.dmp
memory/3280-1389-0x00007FF9920C0000-0x00007FF992526000-memory.dmp
memory/3280-1388-0x00007FF9A24F0000-0x00007FF9A2505000-memory.dmp
memory/3280-1386-0x00007FF9A2860000-0x00007FF9A2895000-memory.dmp
memory/3280-1385-0x00007FF9A1E40000-0x00007FF9A1E80000-memory.dmp
memory/3280-1384-0x00007FF9A2B00000-0x00007FF9A2B18000-memory.dmp
memory/3280-1383-0x00007FF9A6DD0000-0x00007FF9A6DDD000-memory.dmp
memory/3280-1382-0x00007FF9A2B20000-0x00007FF9A2B39000-memory.dmp
memory/3280-1381-0x00007FF9A9FB0000-0x00007FF9A9FBF000-memory.dmp
memory/3280-1380-0x00007FF9A2400000-0x00007FF9A24B8000-memory.dmp
memory/3280-1379-0x00007FF9A2AD0000-0x00007FF9A2AFC000-memory.dmp