59c50c50df819410c0f5ee039e5934c273d3aae71a4d1e2b45690c893e0e201d

Resubmissions

08/08/2024, 14:15

max time kernel
124s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/08/2024, 14:15

Target

PPPwnGo-v2.8/PPPwn/CPP/pppwn.exe
Size

554KB
MD5

199f3d26b818603f961b0995aa5271b4
SHA1

e880b01c4773ad16c9869a11fd0892efe0d9f0b8
SHA256

764ed91127f50370a3c24f7e3bf975c726dec9dfe01c855c461572087a595250
SHA512

8dded7122d10e92d96e173c567eb98282a6554dd36baa9c9ced799257fc329a2806e6a83e28e9dedcae80f3a669437ab5852b446707d31d4723b0a69e3b06b8f
SSDEEP

12288:XoTVroZk/NiDnKVZ9dwHBdkl+tLE3RwPz3BtYJKD+qNkfN9AoS46:XoB0Z8N6cCTkl+GCLnNDaf36

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral4/memory/4976-0-0x0000000000CC0000-0x0000000000EE5000-memory.dmp	upx
behavioral4/memory/4976-1-0x0000000000CC0000-0x0000000000EE5000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\PPPwnGo-v2.8\PPPwn\CPP\pppwn.exe
"C:\Users\Admin\AppData\Local\Temp\PPPwnGo-v2.8\PPPwn\CPP\pppwn.exe"
1⤵
PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4252,i,11251706013556949551,5157034131170452377,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:8
1⤵
PID:2500

memory/4976-0-0x0000000000CC0000-0x0000000000EE5000-memory.dmp

Filesize
2.1MB

Download
memory/4976-1-0x0000000000CC0000-0x0000000000EE5000-memory.dmp

Filesize
2.1MB

Download