Overview
overview
7Static
static
7MegaDownloader.exe
windows7-x64
7MegaDownloader.exe
windows10-2004-x64
7MegaVPN.exe
windows7-x64
1MegaVPN.exe
windows10-2004-x64
1Microsoft....es.dll
windows7-x64
1Microsoft....es.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1ObjectListView.dll
windows7-x64
1ObjectListView.dll
windows10-2004-x64
1SharpCompress.dll
windows7-x64
1SharpCompress.dll
windows10-2004-x64
1System.AppContext.dll
windows7-x64
1System.AppContext.dll
windows10-2004-x64
1System.Buffers.dll
windows7-x64
1System.Buffers.dll
windows10-2004-x64
1System.Console.dll
windows7-x64
1System.Console.dll
windows10-2004-x64
1System.Glo...rs.dll
windows7-x64
1System.Glo...rs.dll
windows10-2004-x64
1System.IO....le.dll
windows7-x64
1System.IO....le.dll
windows10-2004-x64
1System.IO....on.dll
windows7-x64
1System.IO....on.dll
windows10-2004-x64
1System.IO....es.dll
windows7-x64
1System.IO....es.dll
windows10-2004-x64
1System.IO....em.dll
windows7-x64
1System.IO....em.dll
windows10-2004-x64
1System.Memory.dll
windows7-x64
1System.Memory.dll
windows10-2004-x64
1System.Net.Http.dll
windows7-x64
1System.Net.Http.dll
windows10-2004-x64
1Analysis
-
max time kernel
92s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-09-2024 17:33
Behavioral task
behavioral1
Sample
MegaDownloader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MegaDownloader.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
MegaVPN.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
MegaVPN.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Microsoft.Win32.Primitives.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Microsoft.Win32.Primitives.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Newtonsoft.Json.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
ObjectListView.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
ObjectListView.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
SharpCompress.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
SharpCompress.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
System.AppContext.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
System.AppContext.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
System.Buffers.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
System.Buffers.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
System.Console.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
System.Console.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral19
Sample
System.Globalization.Calendars.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
System.Globalization.Calendars.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
System.IO.Compression.ZipFile.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
System.IO.Compression.ZipFile.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
System.IO.Compression.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
System.IO.Compression.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
System.IO.FileSystem.Primitives.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
System.IO.FileSystem.Primitives.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
System.IO.FileSystem.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
System.IO.FileSystem.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
System.Memory.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
System.Memory.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
System.Net.Http.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
System.Net.Http.dll
Resource
win10v2004-20240802-en
General
-
Target
MegaVPN.exe
-
Size
231KB
-
MD5
ba1a3c2720f6e18edd51fbfae8b1d929
-
SHA1
6afeb3ad6c46df7de16b9bf64d7a961bd40b3be3
-
SHA256
2875813b92678b25d009bd15d8e4f13179c52678ac7d50364700e92d53e76239
-
SHA512
dac8936923395befd3cbc750c50a856401e6b77d872c38cae13ba24dba149fd94a1380cf33f033c003b61f48d7ad68558f8f671d7e6ab27ee77285a3c606ea72
-
SSDEEP
1536:FeZxibGMPOCe1Az2EV55g+38K1Az2EV55g+38tOFkus:wribGMP5CY5K+38GY5K+38QF1
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
MegaVPN.exepid process 2736 MegaVPN.exe 2736 MegaVPN.exe