4ee30b385a3cda6077aea7f3dfe5d2b3da4124372beb9c393e80b07c5e420d9a

Analysis

max time kernel
2s
max time network
1s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/09/2024, 18:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

hyperion without anti vm i hope.exe
Size

6.7MB
MD5

ae81fdd513234d8c0d4be46961ff8236
SHA1

3c3819e5ffc249ca3bb20267d9e754fc5498fbeb
SHA256

4ee30b385a3cda6077aea7f3dfe5d2b3da4124372beb9c393e80b07c5e420d9a
SHA512

c07a20c0b253ff1fc299dcbc8804aad7eb088c0c1aa1dfa97246607a5dec4448145176d6e9c94a2a408ccc43a5db75ccdf70c3f70b8a926d0dfec5ee9c1ab3f4
SSDEEP

196608:vkFv1xeN/FJMIDJf0gsAGKZpR0uAK+i4Ju:+1y/Fqyf0gsqv3AK5

Score

7^/10

upx

Malware Config

Signatures

Loads dropped DLL 7 IoCs

pid	Process
2628	hyperion without anti vm i hope.exe
2628	hyperion without anti vm i hope.exe
2628	hyperion without anti vm i hope.exe
2628	hyperion without anti vm i hope.exe
2628	hyperion without anti vm i hope.exe
2628	hyperion without anti vm i hope.exe
2628	hyperion without anti vm i hope.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x000500000001a4f8-73.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2704 wrote to memory of 2628	2704	hyperion without anti vm i hope.exe	30
PID 2704 wrote to memory of 2628	2704	hyperion without anti vm i hope.exe	30
PID 2704 wrote to memory of 2628	2704	hyperion without anti vm i hope.exe	30

C:\Users\Admin\AppData\Local\Temp\hyperion without anti vm i hope.exe
"C:\Users\Admin\AppData\Local\Temp\hyperion without anti vm i hope.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2704
- C:\Users\Admin\AppData\Local\Temp\hyperion without anti vm i hope.exe
  "C:\Users\Admin\AppData\Local\Temp\hyperion without anti vm i hope.exe"
  2⤵
  - Loads dropped DLL
  PID:2628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI27042\api-ms-win-core-file-l2-1-0.dll

Filesize
20KB

MD5
50abf0a7ee67f00f247bada185a7661c

SHA1
0cddac9ac4db3bf10a11d4b79085ef9cb3fb84a1

SHA256
f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7

SHA512
c2694bb5d103baff1264926a04d2f0fe156b8815a23c3748412a81cc307b71a9236a0e974b5549321014065e393d10228a0f0004df9ba677f03b5d244a64b528

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27042\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
de5695f26a0bcb54f59a8bc3f9a4ecef

SHA1
99c32595f3edc2c58bdb138c3384194831e901d6

SHA256
e9539fce90ad8be582b25ab2d5645772c2a5fb195e602ecdbf12b980656e436a

SHA512
df635d5d51cdea24885ae9f0406f317ddcf04ecb6bfa26579bb2e256c457057607844ded4b52ff1f5ca25abe29d1eb2b20f1709cf19035d3829f36bbe31f550f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27042\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
20KB

MD5
74c264cffc09d183fcb1555b16ea7e4b

SHA1
0b5b08cdf6e749b48254ac811ca09ba95473d47c

SHA256
a8e2fc077d9a7d2faa85e1e6833047c90b22c6086487b98fc0e6a86b7bf8bf09

SHA512
285afbcc39717510ced2ed096d9f77fc438268ecaa59cff3cf167fcc538e90c73c67652046b0ee379e0507d6e346af79d43c51a571c6dd66034f9385a73d00d1

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27042\api-ms-win-core-timezone-l1-1-0.dll

Filesize
20KB

MD5
cb39eea2ef9ed3674c597d5f0667b5b4

SHA1
c133dc6416b3346fa5b0f449d7cc6f7dbf580432

SHA256
1627b921934053f1f7d2a19948aee06fac5db8ee8d4182e6f071718d0681f235

SHA512
2c65014dc045a2c1e5f52f3fea4967d2169e4a78d41fe56617ce9a4d5b30ebf25043112917ff3d7d152744ddef70475937ae0a7f96785f97dcefafe8e6f14d9c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27042\python310.dll

Filesize
1.4MB

MD5
178a0f45fde7db40c238f1340a0c0ec0

SHA1
dcd2d3d14e06da3e8d7dc91a69b5fd785768b5fe

SHA256
9fcb5ad15bd33dd72122a171a5d950e8e47ceda09372f25df828010cde24b8ed

SHA512
4b790046787e57b9414a796838a026b1530f497a75c8e62d62b56f8c16a0cbedbefad3d4be957bc18379f64374d8d3bf62d3c64b53476c7c5005a7355acd2cee

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27042\ucrtbase.dll

Filesize
1.1MB

MD5
3b337c2d41069b0a1e43e30f891c3813

SHA1
ebee2827b5cb153cbbb51c9718da1549fa80fc5c

SHA256
c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7

SHA512
fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI27042\api-ms-win-core-file-l1-2-0.dll

Filesize
20KB

MD5
d92e6a007fc22a1e218552ebfb65da93

SHA1
3c9909332e94f7b7386664a90f52730f4027a75a

SHA256
03bd3217eae0ef68521b39556e7491292db540f615da873dd8da538693b81862

SHA512
b8b0e6052e68c08e558e72c168e4ff318b1907c4dc5fc1cd1104f5cae7cc418293013dabbb30c835a5c35a456e1cb22cc352b7ae40f82b9b7311bb7419d854c7

Download Submit
memory/2628-75-0x000007FEF5EB0000-0x000007FEF631E000-memory.dmp

Filesize
4.4MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads