Analysis

  • max time kernel
    1s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28-10-2022 22:14

General

  • Target

    f12ab43a4a23f2bebd4c60b608d1b1237984ae7b7333e65b3b45e45a63ac4b93.exe

  • Size

    314KB

  • MD5

    00824e6082eccfe1e2c6d6085c06ab80

  • SHA1

    fc1cbd2de472d71970faafd7f7dddafa10967c5f

  • SHA256

    f12ab43a4a23f2bebd4c60b608d1b1237984ae7b7333e65b3b45e45a63ac4b93

  • SHA512

    956ef86d639708dc3d231623c87c19920165fab891f3ca9d348ddac009e9324d54468fed082a15a0e0821531bbe6f318fec0e8814046d1bab91e45d024768ae5

  • SSDEEP

    6144:MrjbUzkuvcBYC47l2xhPAj9yshh1/9CSFuXWzMJSeJMLBz8xq:MrIkuveY3uPw4shT9Nnz62xQq

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f12ab43a4a23f2bebd4c60b608d1b1237984ae7b7333e65b3b45e45a63ac4b93.exe
    "C:\Users\Admin\AppData\Local\Temp\f12ab43a4a23f2bebd4c60b608d1b1237984ae7b7333e65b3b45e45a63ac4b93.exe"
    1⤵
    • Loads dropped DLL
    PID:1644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu14A2DD91.dll

    Filesize

    46KB

    MD5

    82b1b1e89a7b82e5cfbaceb7163d4521

    SHA1

    6cf2c425c0385f25827c273183ec0cd11fde74e6

    SHA256

    b23edd73a0b387c6e9e766e3b47f70f90808da5b0d0f254f96d97c80a2cd7ce2

    SHA512

    8ac5434c972158e2bdf3b9044a672e131d71a7980627ee1cec2c6235820687f019bd66ba0bad5cf79a41546df0c4c5ff293686f3daa04d4f432256d489180f61

  • \Users\Admin\AppData\Local\Temp\{78224622-DD86-4F51-ADBA-95A4A3C164D4}\Custom.dll

    Filesize

    41KB

    MD5

    02f6863d43877ea527bb00b42121aaa3

    SHA1

    e2ee4cb5a99500509f8201ae122b6011bbb94836

    SHA256

    0780490914fbab686204265f8eddbc88b31e4b76413d5d0d6efc34bd6dc11066

    SHA512

    b9447ffa2c865796e7ff0fa63e8670e1ef247b65539af5bcb28d7aea9d43c70515aad7d3bb995870f09be68fe181df90906cab223d66ddb3b629fc5d5ebdbb32

  • \Users\Admin\AppData\Local\Temp\{78224622-DD86-4F51-ADBA-95A4A3C164D4}\_Setup.dll

    Filesize

    40KB

    MD5

    fba0379266a5bcd44aeb9827723b99c9

    SHA1

    778269c2dcf26a34c4229bbfc2c5afbfd2024afa

    SHA256

    f762c90a41f87b2fe5a1ea00ee7131183bdbaeeab2549640cff74d95967443a0

    SHA512

    c1a8cead9e8b77af5f8c2955ea07f499d48b79cae42e20bb724b80175b107165a5f1e9eb1246a9cd06bfe7035e6628fa8eea5c058e589bb3820542b3c4301813

  • memory/1644-55-0x0000000075E31000-0x0000000075E33000-memory.dmp

    Filesize

    8KB