Analysis

  • max time kernel
    88s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    16-07-2024 10:21

General

  • Target

    Q8_20240523_1.9.0_Spanish/EJEAS_Upgrade V2.exe

  • Size

    393KB

  • MD5

    a4f83eae5166f93b30ca99881e1959ad

  • SHA1

    e913f19233cbe79db4483a85180b21b947cced8d

  • SHA256

    229905fb54f3f56e62ca4b585a71f308c652e8e09a9f5d8d77c8f3c8cfe07ed9

  • SHA512

    04b739817137346bbcc95ad3b5f5a0db9311d04a29c9ac8ef6765e595cc81972a1e61d7f276c48bee447d88e066634a45ba244a00b3424ef6c8db982dbf6c189

  • SSDEEP

    6144:HTi9nn7qjLswTTWihLblpkGQyBjFmI2n6HzkEzYkY3hzN+75JjBEz4Th9:zi7qPFHTokYK7Dg2

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Q8_20240523_1.9.0_Spanish\EJEAS_Upgrade V2.exe
    "C:\Users\Admin\AppData\Local\Temp\Q8_20240523_1.9.0_Spanish\EJEAS_Upgrade V2.exe"
    1⤵
    • Loads dropped DLL
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Costura\612F28CF38F243C201408EEA28D5FCEB\32\engineframeworkcpp.dll

    Filesize

    155KB

    MD5

    d2e3fdcbabbe3fc6d0e3092e86e5f34f

    SHA1

    afab58f6a40119fbcc9a1c938b7a26bd289490a1

    SHA256

    c5fba48a2c616fa368152977f9a789552adcc2299871f0755ce09a3f997ca33c

    SHA512

    97238e6193be6dc1bc45bd6cd741ac0c7a4915317556b80cd5c48b22cc0139d10f78474ac44889b06a7cd1e659b6b8199a7f24e9f92ce0db6445fd2e711d81dd

  • C:\Users\Admin\AppData\Local\Temp\Costura\612F28CF38F243C201408EEA28D5FCEB\32\hiddfu.dll

    Filesize

    143KB

    MD5

    5291ff15364c2b9ed0ba8c2e757f665c

    SHA1

    3f535940807e0d6ed43c29b2838841a97c9c0cbb

    SHA256

    c1413b830a8bb32801d536af81273d89e9af005e255dac8a1f76879e6cebe308

    SHA512

    bc480a7ab0be0d63648853fefb3e48b9cadd2a9a23452eca77ab62d4480939b2fdb68287370f6826bb257b3ff8e25ec062df00c5e76db918d2ce112bbff84de1

  • memory/2976-17-0x0000000006D90000-0x0000000006D98000-memory.dmp

    Filesize

    32KB

  • memory/2976-1-0x0000000000040000-0x00000000000A8000-memory.dmp

    Filesize

    416KB

  • memory/2976-11-0x0000000004E60000-0x0000000004E88000-memory.dmp

    Filesize

    160KB

  • memory/2976-16-0x00000000744D0000-0x0000000074C81000-memory.dmp

    Filesize

    7.7MB

  • memory/2976-0-0x00000000744DE000-0x00000000744DF000-memory.dmp

    Filesize

    4KB

  • memory/2976-19-0x00000000096E0000-0x00000000096EE000-memory.dmp

    Filesize

    56KB

  • memory/2976-18-0x0000000009720000-0x0000000009758000-memory.dmp

    Filesize

    224KB

  • memory/2976-20-0x00000000744D0000-0x0000000074C81000-memory.dmp

    Filesize

    7.7MB

  • memory/2976-21-0x00000000744D0000-0x0000000074C81000-memory.dmp

    Filesize

    7.7MB

  • memory/2976-22-0x00000000744DE000-0x00000000744DF000-memory.dmp

    Filesize

    4KB

  • memory/2976-23-0x00000000744D0000-0x0000000074C81000-memory.dmp

    Filesize

    7.7MB