Analysis

  • max time kernel
    94s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-09-2024 06:18

General

  • Target

    EAC拔苗成长指引 v3.58/其它/MPC encoder/mppenc.exe

  • Size

    77KB

  • MD5

    b4db30d74c5c0d1bacae1fe5f757eae3

  • SHA1

    c11551fe9fdf47e651891069cab13a6d82d796d0

  • SHA256

    9788cd1f9382fd96182da908f11f991462d39768664cac73c9b5cd7f7be3c218

  • SHA512

    c76517da5081c69fed5b48970c79ee8090f2fb1b65d0ce19229f9afa5681a4c255f2d82982cb176269084bd317cf04594d0e67a4f458b6a8fbb6bcaeb464ba17

  • SSDEEP

    1536:fI4RWyDfCikYSLNKyeUPv0Gdfy1VMJKcClWTt4fAbmRPqp+gigKbiia:A4RWCfC3Y0No00swlgnbyIviJWV

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\EAC拔苗成长指引 v3.58\其它\MPC encoder\mppenc.exe
    "C:\Users\Admin\AppData\Local\Temp\EAC拔苗成长指引 v3.58\其它\MPC encoder\mppenc.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:432

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/432-0-0x0000000000400000-0x0000000000472000-memory.dmp

    Filesize

    456KB

  • memory/432-1-0x0000000000400000-0x0000000000472000-memory.dmp

    Filesize

    456KB