Analysis
- max time kernel
122s - max time network
128s - platform
windows7_x64 - resource
win7-20241010-en - resource tags
- submitted
28/10/2024, 19:49
General
- Target Vape V4/vape-v4.exe
- Size 10.9MB
- Sample241028-yjtx2stmax
- SHA256 6d36b308afc3173e03f00b2e3666d596b2a12035bd6dd6366e68799fcbacae59
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Vape V4\vape-v4.exe"C:\Users\Admin\AppData\Local\Temp\Vape V4\vape-v4.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Vape V4\vape-v4.exe"C:\Users\Admin\AppData\Local\Temp\Vape V4\vape-v4.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
python311.dll
memory/2776-48-0x000007FEF5CE0000-0x000007FEF62C8000-memory.dmp