Analysis

  • max time kernel
    153s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 03:35

General

  • Target

    c93cd1caa8ee55a6c9963cf2e737408d42f0b119a840a2068009766c6525b12f.exe

  • Size

    874KB

  • MD5

    475f38789348dd6c8d27409079d6f9cf

  • SHA1

    2e4833b0f945bba7b159967b16a3529f5e303585

  • SHA256

    c93cd1caa8ee55a6c9963cf2e737408d42f0b119a840a2068009766c6525b12f

  • SHA512

    f49d3fd10d9cad4f6833d3ba029ef7d512527f7dd7e516195a74d9ea4a67ff64c52f3894ae236f7460ec3a0318e1d69b7c37977166c3a906bed01f720689f7cc

  • SSDEEP

    24576:j0iIHgDuRAK89wa9Iw8j1304PPqjeyVPqBddjEVDt7:pKmuRAkfw8xbPCnVID0t7

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 28 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c93cd1caa8ee55a6c9963cf2e737408d42f0b119a840a2068009766c6525b12f.exe
    "C:\Users\Admin\AppData\Local\Temp\c93cd1caa8ee55a6c9963cf2e737408d42f0b119a840a2068009766c6525b12f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3488
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1732 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:4288

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/3488-0-0x0000000000400000-0x00000000005C9200-memory.dmp

            Filesize

            1.8MB

          • memory/3488-1-0x0000000000400000-0x00000000005C9200-memory.dmp

            Filesize

            1.8MB

          • memory/3488-2-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-25-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-40-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-52-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-54-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-53-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-51-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-48-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-45-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-41-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-37-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-35-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-31-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-29-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-27-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-23-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-22-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-19-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-15-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-13-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-11-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-9-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-7-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-6-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-5-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-4-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-17-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB

          • memory/3488-55-0x0000000000400000-0x00000000005C9200-memory.dmp

            Filesize

            1.8MB

          • memory/3488-56-0x0000000000400000-0x00000000005C9200-memory.dmp

            Filesize

            1.8MB

          • memory/3488-58-0x0000000010000000-0x000000001003E000-memory.dmp

            Filesize

            248KB