Overview

overview

7

Static

static

9478501f83...d1.exe

windows7-x64

7

9478501f83...d1.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    152s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2022 18:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9478501f83fd32bcfb35442741b6b75346c6abeb6016424d8857c3330c471ad1.exe

  • Size

    2.2MB

  • MD5

    18c360de461e3118e5aef59bd0b53349

  • SHA1

    ec88f9eeade99bc47d3ecefdca642b9133423d21

  • SHA256

    9478501f83fd32bcfb35442741b6b75346c6abeb6016424d8857c3330c471ad1

  • SHA512

    7d0f510fce82f6884e3184a3adc5863d428cf569897d21ea04e7e66cb1d63465c7056f2216d6dc552c8a07e314e848ca5b653fd28991b157ed83e88c74e51f2c

  • SSDEEP

    49152:KXBOC1/pTo/y6RNKPcUy8gHIjITasY6DwOBfrnvV7UeWtZvEO+zgdd:8kC1hTo/hKxVgOkYiwOBpIeWzozgdd

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9478501f83fd32bcfb35442741b6b75346c6abeb6016424d8857c3330c471ad1.exe
    "C:\Users\Admin\AppData\Local\Temp\9478501f83fd32bcfb35442741b6b75346c6abeb6016424d8857c3330c471ad1.exe"
    1⤵
    • Loads dropped DLL
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yhgenqm5.4d1\7z.dll
    Filesize

    893KB

    MD5

    04ad4b80880b32c94be8d0886482c774

    SHA1

    344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

    SHA256

    a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

    SHA512

    3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\yhgenqm5.4d1\7z.dll
    Filesize

    893KB

    MD5

    04ad4b80880b32c94be8d0886482c774

    SHA1

    344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

    SHA256

    a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

    SHA512

    3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\yhgenqm5.4d1\7z.dll
    Filesize

    893KB

    MD5

    04ad4b80880b32c94be8d0886482c774

    SHA1

    344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

    SHA256

    a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

    SHA512

    3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

    Download Submit

  • memory/4504-132-0x00000000752E0000-0x0000000075891000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/4504-136-0x00000000752E0000-0x0000000075891000-memory.dmp

    Filesize

    5.7MB

    Download