Overview

overview

10

Static

static

10

df6eff533d...65.exe

windows7-x64

7

df6eff533d...65.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/07/2024, 03:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    df6eff533d111856d6146ba8fd840f65.exe
  • Size 42.0MB
  • Sample240703-d1xp2szapl
  • SHA256 b387db0052fa79855bed87566a3799f27831e783ea9dbc8cdcb4083bc494b596
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • UPX packed file 31 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df6eff533d111856d6146ba8fd840f65.exe
    "C:\Users\Admin\AppData\Local\Temp\df6eff533d111856d6146ba8fd840f65.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2484
    • C:\Users\Admin\AppData\Local\Temp\df6eff533d111856d6146ba8fd840f65.exe
      "C:\Users\Admin\AppData\Local\Temp\df6eff533d111856d6146ba8fd840f65.exe"
      2⤵
      • Loads dropped DLL
      PID:4912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_asyncio.pyd
        • Size 37KB
        • SHA256 8a9d6828109fb314a5ab1ac0c431893476a06dae3f9c1c7ce8df44eb9f5e18bc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_bz2.pyd
        • Size 48KB
        • SHA256 21775c01c7dc3558d13eb4f37258f6e480605b7fcde9d586c341d4ab9ebb6d08
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_ctypes.pyd
        • Size 59KB
        • SHA256 129443f9fbc7b8e80ab55403f33112353b3266f9be2aa75112af01627167761d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_decimal.pyd
        • Size 107KB
        • SHA256 b5e352bed299132be36ab22e66b613a9f5c8b6a1a8ef534e2c1ebd18c55cb0ba
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_hashlib.pyd
        • Size 35KB
        • SHA256 47a9670dea27d8bdf5f935269ee293733963d363d588a76ba0fe5825470993e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_lzma.pyd
        • Size 86KB
        • SHA256 6a78157f4a558c8578b14de47d76a4cd766cbee7ed65d25e715838489bd1b406
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_multiprocessing.pyd
        • Size 27KB
        • SHA256 4ab23d33191d5fc9ab861c19ae22d648504579742619db665a882195ae18bd07
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_overlapped.pyd
        • Size 33KB
        • SHA256 c9ce4deab0a5b28569b6a99be1eab9caa6cb406b771d115b01915ca633e9ef16
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_queue.pyd
        • Size 26KB
        • SHA256 e1f01c581ff5e8f05b6bbdd7bfb0402838904ecccfb0d73cbd70281fccb0566b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_socket.pyd
        • Size 44KB
        • SHA256 b076fb9ce236cd38127ec21af96092a11791c4200916509fdac3f03b029987e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _sqlite3.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_sqlite3.pyd
        • Size 57KB
        • SHA256 ffca9eaaf35a740aa43af69d30b74c8dbd8a06b1766541fd112c7ad8ca40f1e1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_ssl.pyd
        • Size 66KB
        • SHA256 0040f856982f22fb094f98b6f9481cdb744a85c60026b2c0496bc1184dc40ba4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_wmi.pyd
        • Size 28KB
        • SHA256 852b118255f39fd5d4dea098fb61b2d2600454a1075f366bd24b76cfbd2af59e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\base_library.zip
        • Size 1.3MB
        • SHA256 d8de678c0ac0cecb7be261bda75511c47e6a565f0c6260eacf240c7c5039753b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        crypto_clipper.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\crypto_clipper.json
        • Size 155B
        • SHA256 3f7446866f42bcbeb8426324d3ea58f386f3171abe94279ea7ec773a4adde7d7
        • MD5 SHA1 SHA512
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\libcrypto-3.dll
        • Size 1.6MB
        • SHA256 f8de79a5dd7eeb4b2a053315ab4c719cd48fe90b0533949f94b6a291e6bc70fd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\libffi-8.dll
        • Size 29KB
        • SHA256 e9d8eb01bb9b02ce3859ba4527938a71b4668f98897d46f29e94b27014036523
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libopus-0.x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\libopus-0.x64.dll
        • Size 217KB
        • SHA256 fa8715dd0df84fdedbe4aa17763b2ab0db8941fa33421b6d42e25e59c4ae8732
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\libssl-3.dll
        • Size 222KB
        • SHA256 b9c8276a3122cacba65cfa78217fef8a6d4f0204548fcacce66018cb91cb1b2a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\pyexpat.pyd
        • Size 88KB
        • SHA256 2587785556ab9f375c159515d39d8c61802f5fba06df8a7cc24566d4f5263eb6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\python312.dll
        • Size 1.7MB
        • SHA256 e63503b2715df3eab8abb9b2682129e27a7add9acea9008f06f55494a2b2f3d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\select.pyd
        • Size 25KB
        • SHA256 bdf8837a2492e1a0b0382857adc739019d77c886c3664ab4143e5286911e9727
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sqlite3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\sqlite3.dll
        • Size 644KB
        • SHA256 54859a21c91efa7f91b5d0e51bfe29f87f24dd7f20645ce7e285159bd2f677c6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\unicodedata.pyd
        • Size 295KB
        • SHA256 739dfdfca8853f7e2196d1f1353048e77961a5c4889daf30f7c7c08215aa9d90
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/4912-155-0x00007FF85D800000-0x00007FF85D825000-memory.dmp
        Download

        memory/4912-156-0x00007FF85D740000-0x00007FF85D74F000-memory.dmp
        Download

        memory/4912-149-0x00007FF84A0A0000-0x00007FF84A764000-memory.dmp
        Download

        memory/4912-179-0x00007FF85D720000-0x00007FF85D734000-memory.dmp
        Download

        memory/4912-181-0x00007FF849B70000-0x00007FF84A099000-memory.dmp
        Download

        memory/4912-185-0x00007FF85D720000-0x00007FF85D734000-memory.dmp
        Download

        memory/4912-182-0x00007FF84A0A0000-0x00007FF84A764000-memory.dmp
        Download

        memory/4912-183-0x00007FF85D800000-0x00007FF85D825000-memory.dmp
        Download

        memory/4912-186-0x00007FF849B70000-0x00007FF84A099000-memory.dmp
        Download