Overview

overview

10

Static

static

c718134295...1c.exe

windows7_x64

10

c718134295...1c.exe

windows10-2004_x64

7

Analysis

  • max time kernel
    1575s
  • max time network
    1628s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    28/06/2022, 16:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    c7181342950c1776bd246b17588fd6f8b846abded0885c704fb9f67e0602491c.exe
  • Size 273KB
  • Sample220628-vga6dacff4
  • SHA256 c7181342950c1776bd246b17588fd6f8b846abded0885c704fb9f67e0602491c
  • MD5 SHA1 SHA512
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 15 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c7181342950c1776bd246b17588fd6f8b846abded0885c704fb9f67e0602491c.exe
    "C:\Users\Admin\AppData\Local\Temp\c7181342950c1776bd246b17588fd6f8b846abded0885c704fb9f67e0602491c.exe"
    1⤵
    • Loads dropped DLL
    PID:2772

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Banner.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\Banner.dll
        • Size 4KB
        • SHA256 354bd05ee11ec480618851bdea36d4bd6e667853218daf8d4722f24f82195b43
        • MD5 SHA1 SHA512
        Submit Download

        Banner.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\Banner.dll
        • Size 4KB
        • SHA256 354bd05ee11ec480618851bdea36d4bd6e667853218daf8d4722f24f82195b43
        • MD5 SHA1 SHA512
        Submit Download

        BgImage.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\BgImage.dll
        • Size 7KB
        • SHA256 6702482da72bfa4c297c072499194660ec7ba1b2732378b024af46e88675c92b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        BgImage.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\BgImage.dll
        • Size 7KB
        • SHA256 6702482da72bfa4c297c072499194660ec7ba1b2732378b024af46e88675c92b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Dialer.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\Dialer.dll
        • Size 3KB
        • SHA256 e0a0d9cf2e419bd24dcfc894f62475f1223993b67d70723fae224df97daf18d3
        • MD5 SHA1 SHA512
        Submit Download

        Dialer.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\Dialer.dll
        • Size 3KB
        • SHA256 e0a0d9cf2e419bd24dcfc894f62475f1223993b67d70723fae224df97daf18d3
        • MD5 SHA1 SHA512
        Submit Download

        StartMenu.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\StartMenu.dll
        • Size 7KB
        • SHA256 6dd790a014a55ddd7df741a6e6afe0c9df936e7b463cd203563c991b4ea1e5ee
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        StartMenu.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\StartMenu.dll
        • Size 7KB
        • SHA256 6dd790a014a55ddd7df741a6e6afe0c9df936e7b463cd203563c991b4ea1e5ee
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\System.dll
        • Size 11KB
        • SHA256 e94a1f7bcd7e0d532b660d0af468eb3321536c3efdca265e61f9ec174b1aef27
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        TypeLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\TypeLib.dll
        • Size 3KB
        • SHA256 51bbdc821c4a242c041a35874810e9d78e8b821d10f7e0a64e56eefd135e7e07
        • MD5 SHA1 SHA512
        Submit Download

        TypeLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\TypeLib.dll
        • Size 3KB
        • SHA256 51bbdc821c4a242c041a35874810e9d78e8b821d10f7e0a64e56eefd135e7e07
        • MD5 SHA1 SHA512
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 80d84f6c405f4e7b51d3e0c7c10b06ce60b28a43451bbe0e6e464d5e4783fc35
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 80d84f6c405f4e7b51d3e0c7c10b06ce60b28a43451bbe0e6e464d5e4783fc35
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 80d84f6c405f4e7b51d3e0c7c10b06ce60b28a43451bbe0e6e464d5e4783fc35
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr65E4.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 80d84f6c405f4e7b51d3e0c7c10b06ce60b28a43451bbe0e6e464d5e4783fc35
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/2772-137-0x0000000002341000-0x0000000002343000-memory.dmp
        Download