Overview

overview

10

Static

static

10

𝙄𝙉�...οΏ½οΏ½).7z

windows10-2004-x64

8

All Files/...ll.dll

windows10-2004-x64

8

All Files/...RT.dll

windows10-2004-x64

8

All Files/...es.dll

windows10-2004-x64

8

All Files/...ar.exe

windows10-2004-x64

6

All Files/...32.dll

windows10-2004-x64

6

All Files/...re.pkg

windows10-2004-x64

8

All Files/...ar.dll

windows10-2004-x64

6

All Files/...me.dll

windows10-2004-x64

8

All Files/...re.dll

windows10-2004-x64

8

All Files/...tp.exe

windows10-2004-x64

6

All Files/...017.js

windows10-2004-x64

8

All Files/...st.dll

windows10-2004-x64

8

All Files/...ng.dll

windows10-2004-x64

8

All Files/...er.exe

windows10-2004-x64

6

All Files/...64.dll

windows10-2004-x64

8

All Files/...556.js

windows10-2004-x64

8

All Files/...ts.dll

windows10-2004-x64

8

All Files/...ed.dll

windows10-2004-x64

6

All Files/...tp.exe

windows10-2004-x64

6

All Files/...32.dll

windows10-2004-x64

6

All Files/...pa.dll

windows10-2004-x64

8

All Files/...sm.dll

windows10-2004-x64

8

All Files/...ble.js

windows10-2004-x64

8

All Files/...dor.js

windows10-2004-x64

8

All Files/...xt.exe

windows10-2004-x64

8

All Files/...nv.exe

windows10-2004-x64

8

All Files/...sh.exe

windows10-2004-x64

8

All Files/...-2.dll

windows10-2004-x64

8

All Files/...sm.dll

windows10-2004-x64

8

All Files/...32.dll

windows10-2004-x64

6

All Files/...58.dll

windows10-2004-x64

6

Resubmissions

13-02-2025 00:07

250213-aetjqazndp 10

13-02-2025 00:06

250213-adthbs1jbt 10

13-02-2025 00:02

250213-abyn9szrhw 10

Analysis

  • max time kernel
    774s
  • max time network
    907s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250211-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250211-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-02-2025 00:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    All Files/Assets/MigrationService/legal/bin/sexp-conv.exe

  • Size

    62KB

  • MD5

    28dfa4942f159d4078c8d59abfbb0d15

  • SHA1

    1189807666fb4cbb131a54c4e73a16d536a84041

  • SHA256

    49a56387ba47d53025b2e78cd957fc465e5a8fddfc771d776f87ec2ca455764c

  • SHA512

    2703edd205d55d6ffcfed968d6e2f3fc91e111d626443180f295d139b3d3d82402ecb4973e23bc37c0f78078ab47d9bb5cbf133fe8030088e19fae87c64fe0ff

  • SSDEEP

    1536:MPFyB6stCaVPd6k2IAN7BGdpFuzTFrhh3+y0d0GcWDFF:MPFS6snj2xNGdKFuy0dnZDFF

Score
8/10
discovery

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\All Files\Assets\MigrationService\legal\bin\sexp-conv.exe
    "C:\Users\Admin\AppData\Local\Temp\All Files\Assets\MigrationService\legal\bin\sexp-conv.exe"
    1⤵
      PID:5116
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIxIiBpbnN0YWxsZGF0ZXRpbWU9IjE3MzkyODMzNzEiIG9vYmVfaW5zdGFsbF90aW1lPSIxMzM4Mzc1NDE5Mjc1MzAwMDAiPjxldmVudCBldmVudHR5cGU9IjMxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIyMTc5ODYyIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NDU1NDQwMDcwIi8-PC9hcHA-PC9yZXF1ZXN0Pg
      1⤵
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:2484

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads