Overview

overview

10

Static

static

10

2ae2f9512b...61.exe

windows7-x64

7

2ae2f9512b...61.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    155s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/07/2024, 01:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2ae2f9512ba9cb415f7b5c0b0f66da61.exe
  • Size 50.5MB
  • Sample240701-brhhnavfpl
  • SHA256 a1264d547053a5c560225566d7ec4db4bea2936de57565abe190a934c5502541
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • UPX packed file 52 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2ae2f9512ba9cb415f7b5c0b0f66da61.exe
    "C:\Users\Admin\AppData\Local\Temp\2ae2f9512ba9cb415f7b5c0b0f66da61.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4760
    • C:\Users\Admin\AppData\Local\Temp\2ae2f9512ba9cb415f7b5c0b0f66da61.exe
      "C:\Users\Admin\AppData\Local\Temp\2ae2f9512ba9cb415f7b5c0b0f66da61.exe"
      2⤵
      • Loads dropped DLL
      PID:1796
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3460 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:4284

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          SDL2.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\SDL2.dll
          • Size 635KB
          • SHA256 aaa11e97c3621ed680ff2388b91acb394173b96a6e8ffbf3b656079cd00a0b9f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SDL2_image.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\SDL2_image.dll
          • Size 58KB
          • SHA256 22b27380d4f1f217f0e5d5c767e5c244256386cd9d87f8ddf303baaf9239fc4c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SDL2_mixer.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\SDL2_mixer.dll
          • Size 124KB
          • SHA256 1327f84e3509f3ccefeef1c12578faf04e9921c145233687710253bf903ba095
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SDL2_ttf.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\SDL2_ttf.dll
          • Size 601KB
          • SHA256 74591aab94bb87fc9a2c45264930439bbc0d1525bf2571025cd9804e5a1cd11a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\VCRUNTIME140.dll
          • Size 116KB
          • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          VCRUNTIME140_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\VCRUNTIME140_1.dll
          • Size 48KB
          • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _asyncio.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_asyncio.pyd
          • Size 37KB
          • SHA256 8a9d6828109fb314a5ab1ac0c431893476a06dae3f9c1c7ce8df44eb9f5e18bc
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_bz2.pyd
          • Size 48KB
          • SHA256 21775c01c7dc3558d13eb4f37258f6e480605b7fcde9d586c341d4ab9ebb6d08
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_ctypes.pyd
          • Size 59KB
          • SHA256 129443f9fbc7b8e80ab55403f33112353b3266f9be2aa75112af01627167761d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _decimal.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_decimal.pyd
          • Size 107KB
          • SHA256 b5e352bed299132be36ab22e66b613a9f5c8b6a1a8ef534e2c1ebd18c55cb0ba
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _elementtree.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_elementtree.pyd
          • Size 59KB
          • SHA256 5763c0e5cd345703b139412a9fe10d685ccc496ab0415db37017fadef5213c7b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_hashlib.pyd
          • Size 35KB
          • SHA256 47a9670dea27d8bdf5f935269ee293733963d363d588a76ba0fe5825470993e6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_lzma.pyd
          • Size 86KB
          • SHA256 6a78157f4a558c8578b14de47d76a4cd766cbee7ed65d25e715838489bd1b406
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _multiprocessing.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_multiprocessing.pyd
          • Size 27KB
          • SHA256 4ab23d33191d5fc9ab861c19ae22d648504579742619db665a882195ae18bd07
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _overlapped.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_overlapped.pyd
          • Size 33KB
          • SHA256 c9ce4deab0a5b28569b6a99be1eab9caa6cb406b771d115b01915ca633e9ef16
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _queue.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_queue.pyd
          • Size 26KB
          • SHA256 e1f01c581ff5e8f05b6bbdd7bfb0402838904ecccfb0d73cbd70281fccb0566b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_socket.pyd
          • Size 44KB
          • SHA256 b076fb9ce236cd38127ec21af96092a11791c4200916509fdac3f03b029987e6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _sqlite3.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_sqlite3.pyd
          • Size 57KB
          • SHA256 ffca9eaaf35a740aa43af69d30b74c8dbd8a06b1766541fd112c7ad8ca40f1e1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_ssl.pyd
          • Size 66KB
          • SHA256 0040f856982f22fb094f98b6f9481cdb744a85c60026b2c0496bc1184dc40ba4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _wmi.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\_wmi.pyd
          • Size 28KB
          • SHA256 852b118255f39fd5d4dea098fb61b2d2600454a1075f366bd24b76cfbd2af59e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\base_library.zip
          • Size 1.3MB
          • SHA256 c611943f0aeb3292d049437cb03500cc2f8d12f23faf55e644bca82f43679bc0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          crypto_clipper.json
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\crypto_clipper.json
          • Size 155B
          • SHA256 3f7446866f42bcbeb8426324d3ea58f386f3171abe94279ea7ec773a4adde7d7
          • MD5 SHA1 SHA512
          Submit Download

          freetype.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\freetype.dll
          • Size 292KB
          • SHA256 50249f68b4faf85e7cd8d1220b7626a86bc507af9ae400d08c8e365f9ab97cde
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libcrypto-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libcrypto-3.dll
          • Size 1.6MB
          • SHA256 f8de79a5dd7eeb4b2a053315ab4c719cd48fe90b0533949f94b6a291e6bc70fd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libffi-8.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libffi-8.dll
          • Size 29KB
          • SHA256 e9d8eb01bb9b02ce3859ba4527938a71b4668f98897d46f29e94b27014036523
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libjpeg-9.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libjpeg-9.dll
          • Size 108KB
          • SHA256 1eed2385030348c84bbdb75d41d64891be910c27fab8d20fc9e85485fcb569dd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libmodplug-1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libmodplug-1.dll
          • Size 117KB
          • SHA256 9319bf867ed6007f3c61da139c2ab8b74a4cb68bf56265a101e79396941f6d3b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libogg-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libogg-0.dll
          • Size 16KB
          • SHA256 2ec2322aec756b795c2e614dab467ef02c3d67d527ad117f905b3ab0968ccf24
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libopus-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libopus-0.dll
          • Size 181KB
          • SHA256 fd8de9169ccf53c5968eec0c90e9ff3a66fb451a5bf063868f3e82007106b491
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libopus-0.x64.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libopus-0.x64.dll
          • Size 217KB
          • SHA256 fa8715dd0df84fdedbe4aa17763b2ab0db8941fa33421b6d42e25e59c4ae8732
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libopusfile-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libopusfile-0.dll
          • Size 26KB
          • SHA256 6dea07c27c0cc5763347357e10c3b17af318268f0f17c7b165325ce524a0e8d5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libpng16-16.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libpng16-16.dll
          • Size 98KB
          • SHA256 20391787cba331cfbe32fbf22f328a0fd48924e944e80de20ba32886bf4b6fd2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libssl-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libssl-3.dll
          • Size 222KB
          • SHA256 b9c8276a3122cacba65cfa78217fef8a6d4f0204548fcacce66018cb91cb1b2a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libtiff-5.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libtiff-5.dll
          • Size 127KB
          • SHA256 4f50820827ac76042752809479c357063fe5653188654a6ba4df639da2fbf3ca
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libwebp-7.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\libwebp-7.dll
          • Size 192KB
          • SHA256 fc06b8f92e86b848a17eaf7ed93464f54ed1f129a869868a74a75105ff8ce56e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          portmidi.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\portmidi.dll
          • Size 18KB
          • SHA256 97a53e8de3f1b2512f0295b5de98fa7a23023a0e4c4008ae534acdba54110c61
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          pyexpat.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\pyexpat.pyd
          • Size 88KB
          • SHA256 2587785556ab9f375c159515d39d8c61802f5fba06df8a7cc24566d4f5263eb6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          python3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\python3.dll
          • Size 66KB
          • SHA256 5146005c36455e7ede4b8ecc0dc6f6fa8ea6b4a99fedbabc1994ae27dfab9d1b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          python312.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\python312.dll
          • Size 1.7MB
          • SHA256 e63503b2715df3eab8abb9b2682129e27a7add9acea9008f06f55494a2b2f3d5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\select.pyd
          • Size 25KB
          • SHA256 bdf8837a2492e1a0b0382857adc739019d77c886c3664ab4143e5286911e9727
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sqlite3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\sqlite3.dll
          • Size 644KB
          • SHA256 54859a21c91efa7f91b5d0e51bfe29f87f24dd7f20645ce7e285159bd2f677c6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\unicodedata.pyd
          • Size 295KB
          • SHA256 739dfdfca8853f7e2196d1f1353048e77961a5c4889daf30f7c7c08215aa9d90
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          zlib1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47602\zlib1.dll
          • Size 52KB
          • SHA256 0391066f3e6385a9c0fe7218c38f7bd0b3e0da0f15a98ebb07f1ac38d6175466
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          memory/1796-308-0x00007FFCE9060000-0x00007FFCE9724000-memory.dmp
          Download

          memory/1796-354-0x00007FFCF98C0000-0x00007FFCF98D4000-memory.dmp
          Download

          memory/1796-307-0x00007FFCF9EA0000-0x00007FFCF9EAF000-memory.dmp
          Download

          memory/1796-305-0x00007FFCF9780000-0x00007FFCF97A5000-memory.dmp
          Download

          memory/1796-313-0x00007FFCF9C20000-0x00007FFCF9C3A000-memory.dmp
          Download

          memory/1796-297-0x00007FFCE9060000-0x00007FFCE9724000-memory.dmp
          Download

          memory/1796-355-0x00007FFCE8B30000-0x00007FFCE9059000-memory.dmp
          Download

          memory/1796-309-0x00007FFCF9780000-0x00007FFCF97A5000-memory.dmp
          Download

          memory/1796-316-0x00007FFCF93C0000-0x00007FFCF93ED000-memory.dmp
          Download

          memory/1796-356-0x00007FFCE9060000-0x00007FFCE9724000-memory.dmp
          Download

          memory/1796-362-0x00007FFCF98C0000-0x00007FFCF98D4000-memory.dmp
          Download

          memory/1796-357-0x00007FFCE9060000-0x00007FFCE9724000-memory.dmp
          Download

          memory/1796-363-0x00007FFCE8B30000-0x00007FFCE9059000-memory.dmp
          Download

          memory/1796-360-0x00007FFCF9C20000-0x00007FFCF9C3A000-memory.dmp
          Download