Analysis

  • max time kernel
    91s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2022, 18:59

General

  • Target

    713763e443fc517b7845634d4cc663acf7a78ebc938b6ac35d6433957c0dc5c3.exe

  • Size

    17.3MB

  • MD5

    967739632dac00ae5f18614eec74e9ea

  • SHA1

    12b7d92cf1976498111e8737f9e524801d7311b0

  • SHA256

    713763e443fc517b7845634d4cc663acf7a78ebc938b6ac35d6433957c0dc5c3

  • SHA512

    efddff4f492f801c517ef43e49f045d0fa50cbcb8bddf0548390fbff24155b96fb7ee591e96e965a69c88ca102346a4bb838d15a5c4f1e9334db440de6071078

  • SSDEEP

    393216:uvFcfsBqcMXGpUleYhcqeTAT5H3RUYoLlq/2kpY3IV:uNcfs0x2SPh5e0T5H3RUYo5q/83IV

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\713763e443fc517b7845634d4cc663acf7a78ebc938b6ac35d6433957c0dc5c3.exe
    "C:\Users\Admin\AppData\Local\Temp\713763e443fc517b7845634d4cc663acf7a78ebc938b6ac35d6433957c0dc5c3.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:3284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GLCC27A.tmp

    Filesize

    161KB

    MD5

    d745fbfc0af9e589fc3e21f8be013702

    SHA1

    36dc60e5741e3d6c4deb4b1e2aba97846698148a

    SHA256

    4b1a2c11d745ee09d28ddf1a78cdfbfcae6fe9f9cb0816aef47475b377c8542f

    SHA512

    01570efabf0acc7fd8808ea5219a76ed9f8fa7e2c68cf450793c4fa91e38adc5931a50f263fdd675d297a0e97b1e31bb3ef31a69937a6a7997d9dca66a7532d7

  • C:\Users\Admin\AppData\Local\Temp\GLKCB46.tmp

    Filesize

    33KB

    MD5

    07631941f67818659e0e97932224886f

    SHA1

    a5fa37d427480b569fa858ec66cca2a85d35a40d

    SHA256

    d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

    SHA512

    fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

  • C:\Users\Admin\AppData\Local\Temp\GLKCB46.tmp

    Filesize

    33KB

    MD5

    07631941f67818659e0e97932224886f

    SHA1

    a5fa37d427480b569fa858ec66cca2a85d35a40d

    SHA256

    d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

    SHA512

    fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

  • memory/3284-135-0x0000000002151000-0x0000000002153000-memory.dmp

    Filesize

    8KB