b52ffd3f22e5be9aa787b97534dfb5fe3de41d52c350691c43082c26f2838d00 | Triage

Submit
Reports

Overview

overview

Static

static

EXA/.reloc

windows7-x64

3

EXA/.reloc

windows10-2004-x64

3

EXA/.rsrc/.../32512

windows7-x64

1

EXA/.rsrc/.../32512

windows10-2004-x64

1

EXA/.rsrc/ICON/1.ico

windows7-x64

3

EXA/.rsrc/ICON/1.ico

windows10-2004-x64

3

EXA/.rsrc/MANIFEST/1

windows7-x64

1

EXA/.rsrc/MANIFEST/1

windows10-2004-x64

1

EXA/.rsrc/version.txt

windows7-x64

1

EXA/.rsrc/version.txt

windows10-2004-x64

1

EXA/.text

windows7-x64

3

EXA/.text

windows10-2004-x64

3

EXA/Creati...config

windows7-x64

3

EXA/Creati...config

windows10-2004-x64

3

EXA/Creati...gs.pdb

windows7-x64

3

EXA/Creati...gs.pdb

windows10-2004-x64

3

EXA/EAX Console.exe

windows7-x64

EXA/EAX Console.exe

windows10-2004-x64

EXA/EAX Console.pdb

windows7-x64

3

EXA/EAX Console.pdb

windows10-2004-x64

3

EXA/Guna.UI2.dll

windows7-x64

1

EXA/Guna.UI2.dll

windows10-2004-x64

1

Analysis

max time kernel
126s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14-09-2024 22:41

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

EXA/.reloc

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

EXA/.reloc

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

EXA/.rsrc/GROUP_ICON/32512

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

EXA/.rsrc/GROUP_ICON/32512

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

EXA/.rsrc/ICON/1.ico

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

EXA/.rsrc/ICON/1.ico

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

EXA/.rsrc/MANIFEST/1

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

EXA/.rsrc/MANIFEST/1

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

EXA/.rsrc/version.txt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

EXA/.rsrc/version.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

EXA/.text

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

EXA/.text

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

EXA/Creative EAX Settings.exe.config

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral14

Sample

EXA/Creative EAX Settings.exe.config

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

EXA/Creative EAX Settings.pdb

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

EXA/Creative EAX Settings.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

EXA/EAX Console.exe

Resource

win7-20240903-en

agenttesla discovery keylogger spyware stealer trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

EXA/EAX Console.exe

Resource

win10v2004-20240802-en

agenttesla discovery keylogger spyware stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

EXA/EAX Console.pdb

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

EXA/EAX Console.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

EXA/Guna.UI2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

EXA/Guna.UI2.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

EXA/Guna.UI2.dll
Size

2.1MB
MD5

c3291bc3a34eb26cf50ee2e19160f99f
SHA1

87dbe564d84302fc9d7a5812827a588edc0fecb6
SHA256

7be259b403614c31b75312e938da3c6567b8f4f86d7e72ee4676b9ec9662e5f8
SHA512

58581e398699900ede25ca54f067ffe5b42b364b87b1e1beae073d9d5703f4fd85e4e4b298a8b8831b1eb2c96936cff738cb0520c9e70451ff62b132fe47ec17
SSDEEP

24576:MrAtMBDzyFA717LhmvuICCrTfgDl54XhmIEHmPwMnZ4P6FdHQ/jz+mA:MrxBDzyslHUnM6FmA

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\EXA\Guna.UI2.dll,#1
1⤵
PID:4416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4404,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
1⤵
PID:380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy