Analysis

  • max time kernel
    91s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220721-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-08-2022 11:00

General

  • Target

    7.0.0.0.exe

  • Size

    6.4MB

  • MD5

    514ca6348b6d29069d6b436fc1f1c159

  • SHA1

    ebd3d2d7924b78a165eb2d689eae5ff90c709e01

  • SHA256

    35b846afc6bf51292d8a401a68a24a0e36d131d7798ceaa8713f08b6942fe0b5

  • SHA512

    e51f635718f021f5f238b2510c8e7b99b57318cbcbae09773ea123c275f48156f6ca76be6aaea7901a6d7351d54aa8486dbcd01160a18082c59fb09211ab533e

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7.0.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\7.0.0.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\53b4dde3-ceef-4149-b63d-4b67cc36c3e9\GunaDotNetRT.dll
    Filesize

    136KB

    MD5

    9af5eb006bb0bab7f226272d82c896c7

    SHA1

    c2a5bb42a5f08f4dc821be374b700652262308f0

    SHA256

    77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

    SHA512

    7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

  • memory/2556-130-0x0000000000470000-0x0000000000AE8000-memory.dmp
    Filesize

    6.5MB

  • memory/2556-131-0x0000000008620000-0x0000000008BC4000-memory.dmp
    Filesize

    5.6MB

  • memory/2556-132-0x0000000008110000-0x00000000081A2000-memory.dmp
    Filesize

    584KB

  • memory/2556-133-0x0000000008080000-0x000000000808A000-memory.dmp
    Filesize

    40KB

  • memory/2556-135-0x00000000731C0000-0x0000000073249000-memory.dmp
    Filesize

    548KB

  • memory/2556-136-0x000000000A1F0000-0x000000000A28C000-memory.dmp
    Filesize

    624KB

  • memory/2556-137-0x0000000070EA0000-0x0000000070ED7000-memory.dmp
    Filesize

    220KB

  • memory/2556-138-0x000000000E270000-0x000000000E2D6000-memory.dmp
    Filesize

    408KB

  • memory/2556-139-0x0000000070EA0000-0x0000000070ED7000-memory.dmp
    Filesize

    220KB