Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/09/2024, 12:02
General
-
Target
Btcbf-x64.exe
-
Size
8.1MB
-
MD5
efa35abdfad873d22fad4d129c730f62
-
SHA1
91c8f4f5eca24b29be095c1c90c659336b9316c2
-
SHA256
f73f8e20ec34cc8f39715f7d8d9c63bd23c324a66c3320e10e1d8dabd6d354c1
-
SHA512
b03057e9664f5fc7d7d1b24c83db2dcb29060d8cbaef0911621263b753d01607159f2958a796211e907bd32007204f177347679ecb4362d7d65965e5d4285162
-
SSDEEP
196608:rAy9xTrjd3MOdyygyU/Fer6toy0qSE9zaQ2TERLkXB:ky9xnMTgGoNn44wS
Malware Config
Signatures
-
Loads dropped DLL 20 IoCs
-
UPX packed file 53 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Btcbf-x64.exe"C:\Users\Admin\AppData\Local\Temp\Btcbf-x64.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Btcbf-x64.exe"C:\Users\Admin\AppData\Local\Temp\Btcbf-x64.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
99KB
MD58697c106593e93c11adc34faa483c4a0
SHA1cd080c51a97aa288ce6394d6c029c06ccb783790
SHA256ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
SHA512724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987
-
Filesize
39KB
MD5571f7f575f9eb024c1a6a422be9427c0
SHA1519f6663a35117f31e6487a4e7fe14abb44116f3
SHA256a4539dc1e136f18020a6b1b4e91fa365d2a1bbbeb523a9f05950aa76ff531b4a
SHA51290e7bc9709863f3f01fd9b98de47108af8e24e3b2131bb05ae8155427e07639836fac3e66b3db40a0b50d95d425fb8fadc5f19cd214eba5069dea4a75eba463e
-
Filesize
72KB
MD57a42375fddcfa29469dad1153e83a54d
SHA102534d37fb72211d3e84e02d814cb006b363e10d
SHA2568602c832e412043f616852b55d22865a73400b1ebad37e70ce707b085a452960
SHA51235fffaa74256dbf3f3c189cc44c1020adf54e74d75f91b2602890ecb89d0756c7c261153368d221a095639704faa85553b2bd3f43a9835214b56c9fa26c98363
-
Filesize
48KB
MD55d42fde86fab3c402c328d7b7f30d0ab
SHA12d1a369c060b5421a0f4a52f929c1e624dc5abe1
SHA2563a308fa3c961f9e4513aaf32e643a4aad954ec4e8070e681816709bc35e704ef
SHA512031318aed5830a51a7946c4fc1451d76e5d0994d1d789000e3a29cc688afdcc8c4dabe8b22d0ae46e49e2a0e5d3acdeb4b3af2fd373301d102de442884d79108
-
Filesize
101KB
MD52ae1e7e35fd32ada6664c9dcf9954903
SHA188f61b8eb0d15682745405bf90aeacec7bb70afa
SHA25680b5ce2defffc333e25b1baf00efb5a79e3629766d22baec8d3fd2c9f4330574
SHA512cafe57bc88b06924174cb98e84f8b6f2a957cfe0b609c8d1e23bb86ae19c14cf469f2afb0f159be03cec17ec486f0faf0bbfafdb0c49d699726a96c2e45a39fd
-
Filesize
24KB
MD571f8878a60a2e093bcf110dc10bd71f3
SHA18b147d862f1645651dd42256dea5ae7d9e7a24a9
SHA256483d555220c3f224bb243ccbc18648563cf1c7e6353663dc02ca27b418655b9b
SHA5126e91877bb0cfffc7e4b6599c69ba9f1c98d7f6ab7b91bf7aba3e5d7b790821ff4734f3fbd715d9ac83aef73d8f29af1ab6eb29ea27b2c9806e802d2897454b24
-
Filesize
77KB
MD580f83777a7f48a1dd82d40eed366a557
SHA1dc58c8f1c86705ae793eec2b0e286858a8aedf3a
SHA256c295ee078d7aa1bf2e41022ab4088721f8aad3a217a966f0fe3500f2dc7cdfd6
SHA512e8c76ef8158f023d81b96a3541885a5597a3d090c2fa1cf56c01116ebd05828caab4dc0dd7ef127d59eafb89eb8f592d1588691839f9c4215b3f23c725e08329
-
Filesize
14KB
MD5f7abaac8a73c1f407a7745bacee347b3
SHA108b1a529597194fde5522923196de290a5f1a3b9
SHA256d6713c77108c27f43e44596d67187a89783918d7f2dd4f4fcb349ecc97d54471
SHA51258f602a53828fc8bb9e854f4f9252dd173b1841e4150511388e46ce808f3d3b49293d0bf1f2f1986864bc0ae75e5114107c620d72916368a44eea53874445e75
-
Filesize
32KB
MD5b19bc752aae921945922130834eeae0d
SHA1bdebd125431314eb0a7d6bdd63f9e5ca4e21034c
SHA256ef64d80bd69ece272b54466aa2fc333c48d8ce01258708e9e1daf8ab2d84e00e
SHA5126cfd440be4383d7c02c101dc2754c21c81d0c3d3941ba960d28b9847da1ea886fe58c2c98853723814bd77cdd247e180f2e1e9dbecdaee067bc6bfa033b36c38
-
Filesize
50KB
MD553283dadd2cef111ccb506d40aba8a3d
SHA1c151e6454e3c1789241b01f8c9ee5dc6ffe7f67f
SHA256cbd1270e204e8a5755fdf2538b7c1bc5e9448ea0c4d9dfd7565a3475dd3117ae
SHA51245675aed727ac8ce510c54d7f87e9f7a5f08a0201119b4ecfbe96bf2db006f7aaee248e5716a3d94136721501b35ec6987f8d5c7ac562b0e9a23068aa9ab3c57
-
Filesize
763KB
MD5773816aa101a1f94e42de14386d4cac0
SHA1f88f1b10e159e17ca82760a3723fc0e234dbadb8
SHA256a24527e54fb1a7902cdf902962a7d629c54faf622fa3814a8177759f2eeef48c
SHA512bfae546da167b1be389cf7bb7e24759fe5888553e7c021303b1c08e07c9a7f3b5890f5ba25947304196253cacf6de2fa4e92e6e0b89c190b73b0390aaafdd2d0
-
Filesize
236KB
MD51b3cba846506700f8a80806889679407
SHA1c23cc4c1cd96764da9e2bb6f2b1862e53117af85
SHA2563be84c67275ad2f3881d55f8b93a75970d5bb09b41e8cb363a0cecb259baca2c
SHA5124eb4c1bbb6b8c1506f96f33bc9d270efc35c214eb560fca0d75cbbe23edbec753123b17793af48095fffdf2b40c3e01cc9c48a2a9fdfa08925e4753649e0d4f7
-
Filesize
1.1MB
MD5632d91e039c5e054e2bede5a50662c73
SHA1514f622a170ff743f57b177624c7f0d8b6f33c74
SHA256e52d2430e7e4ec4315b1021d9381f967efff669c4b5e98d13b3ab56bc018cd91
SHA512b3530bdd55502b1d84c241a06624c92ef70ce58bd0d8c47cda53fc7056a596815cb49b5c98877098ac9122c0d72fe133a9ff7f424bac93f65216841d5cbb05ad
-
Filesize
23KB
MD5b5150b41ca910f212a1dd236832eb472
SHA1a17809732c562524b185953ffe60dfa91ba3ce7d
SHA2561a106569ac0ad3152f3816ff361aa227371d0d85425b357632776ac48d92ea8a
SHA5129e82b0caa3d72bb4a7ad7d66ebfb10edb778749e89280bca67c766e72dc794e99aab2bc2980d64282a384699929ce6cc996462a73584898d2df67a57bff2a9c6
-
Filesize
190KB
MD5e479e3b40ebd74a1c23c6797f74674ba
SHA1e6cc8bf5b4afa07001c9e9c40fbbc1dededc6861
SHA2565ac935f6053f85b103fee4427836d9764b98e4c82461c6a74500d18038c47706
SHA512a74ba8d9c05cc79c15ac84654f9c3c7cf17ece9650703b916d6b56f3ee1fb16b212e24470d2e827330e35b4a48647fd8a0e261434759faaff0ae47c8027a2904
-
Filesize
73KB
MD54955582a39512178d1c51b4d43b45d81
SHA1b710246a743c481c0f769242fc5bafeff78a570c
SHA25691a702d43c0bb8ebd1c4f0aae40294a683da6be5ad158de9d9ac35722b6c2a11
SHA512d900257da301b8a7187ec28af5d9ba903611dc2ed9981a016df9a9b55be4314e505df5248dfda479d010f093f0ad7921ffe45dd8d7ce835ad078121136b5e009
-
Filesize
1.4MB
MD5d1094d397b2eade96f0b4c2ef19cf7c7
SHA16754be93555731fefbb9776e3357aa0de7ac0334
SHA25661604178ed2c3c8684672f85ccd84a822d6969cc39c05738779a68910bd30756
SHA5129be0a65113f3e420a72ebcdca79699e31c9c9bcaa0ca44a221073fdfba9c491f1770ea238b8603880a3eb91e5c3fc79b6a0c1a91323a551c3853caf481b542d8
-
Filesize
15KB
MD5181c883f36f96227d1817bb5399be36f
SHA1500bd9c9b464a6b88bfd5ead769b0ea926aebf58
SHA2561fe25defc5ab8863b592912154588d32052cdd3cdaa21a1b552ac7cf6aa1369e
SHA512a112877d74d39ada7bc18e81e61ef7d1c38b1c68884fa0629f44550d2117cf223e9aa66f740628d960e6780ce49cf0ba82ca8aff44d4c89245031ef9ec640c75
-
Filesize
992KB
MD50e0bac3d1dcc1833eae4e3e4cf83c4ef
SHA14189f4459c54e69c6d3155a82524bda7549a75a6
SHA2568a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae
SHA512a45946e3971816f66dd7ea3788aacc384a9e95011500b458212dc104741315b85659e0d56a41570731d338bdf182141c093d3ced222c007038583ceb808e26fd
-
Filesize
277KB
MD574d18c9f6da05316f4be35cdef8739fd
SHA1f4fe02801c5da7cbba50dde27c98f93f4d71d10d
SHA2567dfc417951139079869b4bfae8ba8cdb876ffdc3c570b9a0f56a2938e52eb7e2
SHA512db506bf90166a07d1c3787e1bd58643ef101a22c4e85b17b926010899b58b2b53c30b0fc443f600d3b6d806244f20bf9019d8f3ff87381f6a03fa6286e77a7e9
-
Filesize
3.4MB
-
Filesize
288KB
-
Filesize
180KB
-
Filesize
4.5MB
-
Filesize
3.4MB
-
Filesize
56KB
-
Filesize
52KB
-
Filesize
144KB
-
Filesize
212KB
-
Filesize
728KB
-
Filesize
88KB
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
1.1MB
-
Filesize
144KB
-
Filesize
60KB
-
Filesize
4.5MB
-
Filesize
288KB
-
Filesize
100KB
-
Filesize
100KB
-
Filesize
228KB
-
Filesize
1.1MB
-
Filesize
88KB
-
Filesize
52KB
-
Filesize
728KB
-
Filesize
3.4MB
-
Filesize
180KB
-
Filesize
56KB
-
Filesize
100KB
-
Filesize
212KB
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
60KB
-
Filesize
144KB
-
Filesize
4.5MB
-
Filesize
780KB
-
Filesize
228KB