Analysis

  • max time kernel
    141s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 22:28

General

  • Target

    Eric's TelNet98 v14.0-SSH/Setup.exe

  • Size

    91KB

  • MD5

    bb4728d42a8564cd745ce2af4547ef81

  • SHA1

    fa9617155499c0b3812eeec694119c20f5936a50

  • SHA256

    cc3b606894bbf96a0b0a191b94e0cc2e2510f957756aafb2bae2eba87c7ef619

  • SHA512

    d8117748fb19e5f7997780a9d11f5c8fa2c4e7e53f7ffcdfa7dbbda8dbbec8e35e34262cc3a7aa8fd46be1c8d180b862bdd8d967174883f865afd2d28a8b3815

  • SSDEEP

    1536:TI97q+mGvTLBu7S9LD0CJaWuGGGGGGGGGGGGGGGGGGGGGGkaTH/JwxdCwML0/rs6:TIJq+m8l/zCGGGGGGGGGGGGGGGGGGGGG

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Eric's TelNet98 v14.0-SSH\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Eric's TelNet98 v14.0-SSH\Setup.exe"
    1⤵
      PID:1860
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4168,i,1697479186275492802,18058102846092193784,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
      1⤵
        PID:4600

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1860-0-0x0000000000400000-0x000000000042F000-memory.dmp

        Filesize

        188KB

      • memory/1860-1-0x00000000027C0000-0x0000000002CDD000-memory.dmp

        Filesize

        5.1MB

      • memory/1860-2-0x00000000027C0000-0x0000000002CDD000-memory.dmp

        Filesize

        5.1MB

      • memory/1860-3-0x00000000027C0000-0x0000000002CDD000-memory.dmp

        Filesize

        5.1MB

      • memory/1860-4-0x00000000027C0000-0x0000000002CDD000-memory.dmp

        Filesize

        5.1MB

      • memory/1860-5-0x0000000000400000-0x000000000042F000-memory.dmp

        Filesize

        188KB

      • memory/1860-6-0x00000000027C0000-0x0000000002CDD000-memory.dmp

        Filesize

        5.1MB