Overview

overview

7

Static

static

7

62a9f7f550...5d.exe

windows7-x64

7

62a9f7f550...5d.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 23:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    62a9f7f550e48612977ce408eee719e6e0d0b0d91707af05f0c0bf4dac02d85d.exe

  • Size

    519KB

  • MD5

    39b0ee286a7ac29ecb98092384f15d3e

  • SHA1

    c7244c44757c986774b541877d5ad6763e66c900

  • SHA256

    62a9f7f550e48612977ce408eee719e6e0d0b0d91707af05f0c0bf4dac02d85d

  • SHA512

    dac6ed7d9a74893d996497c2573860cb35791c6d6eb7992c0d097cc0a9151c3b038ed8741c8c3104e5cb45e95d773a96af227aca28011ba93b9e396eefff75ba

  • SSDEEP

    12288:kMvxtw7/GN42UhBWdd0pwcLp2AKxZm627lqcVDtDOyqyN:jvXQnB+Wp3pRKxYl7McVD1OG

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\62a9f7f550e48612977ce408eee719e6e0d0b0d91707af05f0c0bf4dac02d85d.exe
    "C:\Users\Admin\AppData\Local\Temp\62a9f7f550e48612977ce408eee719e6e0d0b0d91707af05f0c0bf4dac02d85d.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2308
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4356,i,15142778360084620907,1763097090506261076,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
    1⤵
      PID:4360

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\config\三修幻术师.ini
            Filesize

            68B

            MD5

            65682f382e584500324561470a588806

            SHA1

            c04263b84b535e8b292c4d9f46aa897dd5ccf4da

            SHA256

            7faef9526a57f6b894e3d269a705de24a9f1265ac5f1bf2d43f35be743215a1f

            SHA512

            3c488c7c1eebdca2cb243debba6e3a502bbcf23b0fd427f3323433eb3fbaa94cfd3d52f5a7f48dc61c2f376b9ae4bf03065fd3f877de81a3d770cc3d04b17ec5

            Download Submit

          • memory/2308-0-0x0000000140000000-0x0000000140164000-memory.dmp

            Filesize

            1.4MB

            Download

          • memory/2308-129-0x0000000140000000-0x0000000140164000-memory.dmp

            Filesize

            1.4MB

            Download