Overview

overview

10

Static

static

10

V3NOM FINAL V.exe

windows10-1703-x64

7

V3NOM FINAL V.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    4s
  • max time network
    14s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240729-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240729-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/07/2024, 23:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    V3NOM FINAL V.exe
  • Size 42.0MB
  • Sample240729-3hzjcs1aph
  • SHA256 67a592692812719024d45801a1a508a1d7d87a79ed2235d1327ae0ef7b6f01fc
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • UPX packed file 27 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\V3NOM FINAL V.exe
    "C:\Users\Admin\AppData\Local\Temp\V3NOM FINAL V.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:864
    • C:\Users\Admin\AppData\Local\Temp\V3NOM FINAL V.exe
      "C:\Users\Admin\AppData\Local\Temp\V3NOM FINAL V.exe"
      2⤵
      • Loads dropped DLL
      PID:3700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_asyncio.pyd
        • Size 37KB
        • SHA256 c7000207e8c406f3a18b006649248906963834ff901c7b8b9f627d534e31575b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_bz2.pyd
        • Size 48KB
        • SHA256 4aba601dd528a85dad5975daf6aa394002c8a38582e4abb05a89684f52130084
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_ctypes.pyd
        • Size 59KB
        • SHA256 506cdca8f4cc4754a78edac3be230a5ec7ca4a0d61ef08fe0accab4080b2c69e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_decimal.pyd
        • Size 107KB
        • SHA256 306cc1df8631d632e9831d6a710c8776784c4655b107424290338c385e743026
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_hashlib.pyd
        • Size 35KB
        • SHA256 20af24170652420bc06adbb2fc159ae9e61e71f2cad5370b423c9ce4c57ad5e1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_lzma.pyd
        • Size 86KB
        • SHA256 02fe60ad99452d53294514e8c6b8d95d79cc013742e3a4cd74b36601fc3fb09b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_multiprocessing.pyd
        • Size 27KB
        • SHA256 f10fc80b19740eceb7fdce89c30d6670c9af7ed600fa7f881d27b8b5a054495f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_overlapped.pyd
        • Size 33KB
        • SHA256 2386cf6ceaef4c6aa13974f913d6b3e6cde3b48e2fbb73f5c63ae6fe4384836f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_queue.pyd
        • Size 26KB
        • SHA256 b58694a5585645827ce1f0aa285e176e9328584917a36434132fd71c3f017d8d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_socket.pyd
        • Size 44KB
        • SHA256 f11b57f08a31e172cabae66830f9ef936e322a4df03ba5230d1621db4e7a24b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _sqlite3.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_sqlite3.pyd
        • Size 57KB
        • SHA256 5321e5c26a9bcaebb58f11241121bd0d1e45f98dcfbb4d8457eae42f17b8328a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_ssl.pyd
        • Size 66KB
        • SHA256 efa7fef1f1456e19c44a787b62d047f5d73c6abb6a6d4201d125dc3d101fff09
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\_wmi.pyd
        • Size 28KB
        • SHA256 53d4c23bc2ba89ee5050bae9b498eebbcde5a1906e51389742780f0c976b861f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\base_library.zip
        • Size 1.3MB
        • SHA256 d8de678c0ac0cecb7be261bda75511c47e6a565f0c6260eacf240c7c5039753b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        crypto_clipper.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\crypto_clipper.json
        • Size 155B
        • SHA256 3f7446866f42bcbeb8426324d3ea58f386f3171abe94279ea7ec773a4adde7d7
        • MD5 SHA1 SHA512
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\libcrypto-3.dll
        • Size 1.6MB
        • SHA256 785c8dde9803f8e1b279895c4e598a57dc7b01e0b1a914764fcedef0d7928b4e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\libffi-8.dll
        • Size 29KB
        • SHA256 7d08df2c496c32281bf9a010b62e8898b9743db8b95a7ebee12d746c2e95d676
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libopus-0.x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\libopus-0.x64.dll
        • Size 217KB
        • SHA256 fa8715dd0df84fdedbe4aa17763b2ab0db8941fa33421b6d42e25e59c4ae8732
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\libssl-3.dll
        • Size 222KB
        • SHA256 41448b8365b3a75cf33894844496eb03f84e5422b72b90bdcb9866051939c601
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\pyexpat.pyd
        • Size 88KB
        • SHA256 01974148486d569e9f1ad62d36d4d54b5396b07c853bd50f358d5580fde331f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\python312.dll
        • Size 1.7MB
        • SHA256 22470af77229d53d9141823c12780db63c43703dd525940bc479730d2e43513d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\select.pyd
        • Size 25KB
        • SHA256 7507a92c4787e9e7936a0b4a8eeb0a3f24e5ee12ae58cd7988543581d99817ac
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sqlite3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\sqlite3.dll
        • Size 644KB
        • SHA256 74dc76a2a2d06d61f9f06bd3b0972bfb30ab57b0e5cb8c3011e79ce4a52924f0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8642\unicodedata.pyd
        • Size 295KB
        • SHA256 c5c2997c3b16eb8b89fe230582a579a753efc8317ffd95d9795ec2762aa54ed9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/3700-182-0x00007FFB02D50000-0x00007FFB03279000-memory.dmp
        Download

        memory/3700-157-0x00007FFB1A310000-0x00007FFB1A31F000-memory.dmp
        Download

        memory/3700-156-0x00007FFB187A0000-0x00007FFB187C5000-memory.dmp
        Download

        memory/3700-181-0x00007FFB18670000-0x00007FFB18684000-memory.dmp
        Download

        memory/3700-150-0x00007FFB03280000-0x00007FFB03944000-memory.dmp
        Download