Overview

overview

7

Static

static

7

392f58a974...18.exe

windows7-x64

7

392f58a974...18.exe

windows10-2004-x64

7

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

CopyU!.exe

windows7-x64

5

CopyU!.exe

windows10-2004-x64

5

ExtMenu.dll

windows7-x64

5

ExtMenu.dll

windows10-2004-x64

5

Krnlnex.dll

windows7-x64

5

Krnlnex.dll

windows10-2004-x64

5

TrayIcon.dll

windows7-x64

5

TrayIcon.dll

windows10-2004-x64

5

com.dll

windows7-x64

5

com.dll

windows10-2004-x64

5

eAPI.dll

windows7-x64

5

eAPI.dll

windows10-2004-x64

5

eDirTree.dll

windows7-x64

5

eDirTree.dll

windows10-2004-x64

5

iext.dll

windows7-x64

5

iext.dll

windows10-2004-x64

5

iext2.dll

windows7-x64

5

iext2.dll

windows10-2004-x64

5

Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2024, 08:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CopyU!.exe

  • Size

    404KB

  • MD5

    a1110cb7e0f2731ae9a50c35facf8d46

  • SHA1

    54d4a4e68aa453f8f4c37b73f2612ca486b56960

  • SHA256

    7ddcc047fd7166a6ac8f44e035908ff9aa4af49dfc55d335227495e875daf2e1

  • SHA512

    1ac9796818e2ecc43558429c95bac0f81f9d2d09ff5a7812a37672c7d5e9cdc219aaf3764ce528d537bd58f0251369199f116e2f6671d753e20535981ce15d4e

  • SSDEEP

    6144:wBbQD3oHBFZhLPWq+NyWj5T7fXz9xubBrmSeqxNfuz:IbQLo/neqIRP581KcG

Score
5/10
discoveryupx

Malware Config

Signatures

  • UPX packed file 29 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CopyU!.exe
    "C:\Users\Admin\AppData\Local\Temp\CopyU!.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:4460

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4460-0-0x0000000000400000-0x000000000053C000-memory.dmp

    Filesize

    1.2MB

    Download

  • memory/4460-1-0x0000000010000000-0x000000001012A000-memory.dmp

    Filesize

    1.2MB

    Download

  • memory/4460-2-0x0000000002570000-0x00000000025BA000-memory.dmp

    Filesize

    296KB

    Download

  • memory/4460-3-0x0000000002570000-0x00000000025BA000-memory.dmp

    Filesize

    296KB

    Download

  • memory/4460-4-0x0000000002BA0000-0x0000000002BF9000-memory.dmp

    Filesize

    356KB

    Download

  • memory/4460-5-0x0000000002BA0000-0x0000000002BF9000-memory.dmp

    Filesize

    356KB

    Download

  • memory/4460-7-0x0000000002CC0000-0x0000000002CF9000-memory.dmp

    Filesize

    228KB

    Download

  • memory/4460-6-0x0000000002CC0000-0x0000000002CF9000-memory.dmp

    Filesize

    228KB

    Download

  • memory/4460-10-0x0000000002D00000-0x0000000002D4B000-memory.dmp

    Filesize

    300KB

    Download

  • memory/4460-9-0x0000000000400000-0x000000000053C000-memory.dmp

    Filesize

    1.2MB

    Download

  • memory/4460-8-0x0000000002D00000-0x0000000002D4B000-memory.dmp

    Filesize

    300KB

    Download

  • memory/4460-11-0x0000000010000000-0x000000001012A000-memory.dmp

    Filesize

    1.2MB

    Download

  • memory/4460-12-0x0000000003270000-0x0000000003288000-memory.dmp

    Filesize

    96KB

    Download

  • memory/4460-13-0x0000000002570000-0x00000000025BA000-memory.dmp

    Filesize

    296KB

    Download

  • memory/4460-17-0x0000000002BA0000-0x0000000002BF9000-memory.dmp

    Filesize

    356KB

    Download

  • memory/4460-16-0x0000000002700000-0x0000000002768000-memory.dmp

    Filesize

    416KB

    Download

  • memory/4460-15-0x0000000002700000-0x0000000002768000-memory.dmp

    Filesize

    416KB

    Download

  • memory/4460-14-0x0000000002570000-0x00000000025BA000-memory.dmp

    Filesize

    296KB

    Download

  • memory/4460-18-0x0000000002CC0000-0x0000000002CF9000-memory.dmp

    Filesize

    228KB

    Download

  • memory/4460-21-0x0000000002D00000-0x0000000002D4B000-memory.dmp

    Filesize

    300KB

    Download

  • memory/4460-20-0x00000000027A0000-0x0000000002912000-memory.dmp

    Filesize

    1.4MB

    Download

  • memory/4460-19-0x00000000027A0000-0x0000000002912000-memory.dmp

    Filesize

    1.4MB

    Download

  • memory/4460-22-0x0000000002700000-0x0000000002768000-memory.dmp

    Filesize

    416KB

    Download

  • memory/4460-24-0x0000000010000000-0x000000001012A000-memory.dmp

    Filesize

    1.2MB

    Download

  • memory/4460-31-0x00000000027A0000-0x0000000002912000-memory.dmp

    Filesize

    1.4MB

    Download

  • memory/4460-27-0x0000000002CC0000-0x0000000002CF9000-memory.dmp

    Filesize

    228KB

    Download

  • memory/4460-26-0x0000000002BA0000-0x0000000002BF9000-memory.dmp

    Filesize

    356KB

    Download

  • memory/4460-25-0x0000000002570000-0x00000000025BA000-memory.dmp

    Filesize

    296KB

    Download

  • memory/4460-60-0x0000000010000000-0x000000001012A000-memory.dmp

    Filesize

    1.2MB

    Download