Resubmissions

04/10/2024, 16:44

241004-t8yv3syhpd10

27/09/2024, 16:54

240927-vepkzsvbre10

27/09/2024, 16:44

240927-t86wpavard10

04/08/2024, 18:04

240804-wnq1vawbpg10

03/08/2024, 17:26

240803-vzvbzazekn10

03/08/2024, 16:14

240803-tpp4tsshqa10

03/08/2024, 15:52

240803-tbarzsseqc10

31/07/2024, 19:40

240731-ydk3yszdpq10

31/07/2024, 10:53

240731-my145atfmf10

Analysis

  • max time kernel
    50s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/09/2024, 16:44

General

  • Target
    1df11bc19aa52b623bdf15380e3fded56d8eb6fb7b53a2240779864b1a6474ad.exe
  • Size 1.3MB
  • Sample240927-t86wpavard
  • SHA256 1df11bc19aa52b623bdf15380e3fded56d8eb6fb7b53a2240779864b1a6474ad
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1df11bc19aa52b623bdf15380e3fded56d8eb6fb7b53a2240779864b1a6474ad.exe
    "C:\Users\Admin\AppData\Local\Temp\1df11bc19aa52b623bdf15380e3fded56d8eb6fb7b53a2240779864b1a6474ad.exe"
    1⤵
      PID:3992
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4324,i,12198811467968044966,17227406646827438786,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:8
      1⤵
        PID:2920
      • C:\Windows\System32\rundll32.exe
        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
        1⤵
          PID:868

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              memory/3992-0-0x0000000000B80000-0x0000000000FFA000-memory.dmp

              memory/3992-2-0x0000000000B80000-0x0000000000FFA000-memory.dmp