Analysis

  • max time kernel
    44s
  • max time network
    63s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2022, 22:16

General

  • Target

    c6f60d5bb872f9dcc62db7f4de94c16bc86fcdd1ec1c278c828e97399877a038.exe

  • Size

    316KB

  • MD5

    0b375c22afba688a90bb5c158f045bf0

  • SHA1

    78432cb144ec54573e91cb0387a8f94227641bf1

  • SHA256

    c6f60d5bb872f9dcc62db7f4de94c16bc86fcdd1ec1c278c828e97399877a038

  • SHA512

    5db1fd04eefa8a39833fc2b8be981dce995a5dbafbca8114ec84c5a08f9fde33ef8395ea8ce3f501477acf702785f1b2a7b08a5c15b0c275a358f0f56b9fe183

  • SSDEEP

    6144:3rFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMT:3r2kuveY3ZF31N4XxZjT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6f60d5bb872f9dcc62db7f4de94c16bc86fcdd1ec1c278c828e97399877a038.exe
    "C:\Users\Admin\AppData\Local\Temp\c6f60d5bb872f9dcc62db7f4de94c16bc86fcdd1ec1c278c828e97399877a038.exe"
    1⤵
    • Loads dropped DLL
    PID:4092

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\TsuE14E434B.dll

          Filesize

          46KB

          MD5

          e9c26974bfd588dd47f1d11d6046bda7

          SHA1

          32682123e47db81ad09f1462e004e43086d8676f

          SHA256

          46f88fd78c84a9da0daaf68e93ba833c52c4e93474472d566069b0eb12936b39

          SHA512

          8e14b03454fbf5374e67d3d2830c8e5064074699abed5ae15ac61effb122e6c84d1773ab1adc61aea3b47a277d2223bf1746a0070807369bbe7ef2fee11d1ae2

        • C:\Users\Admin\AppData\Local\Temp\{ADF9124D-08BB-4766-A58D-4099761A30BB}\Custom.dll

          Filesize

          39KB

          MD5

          dd1e6236749b4fb4fbd8a6d9b8d1d1a3

          SHA1

          abda703677e2b6047b54533715429eb6c456f021

          SHA256

          928ac0d35a895730e60156983c38779da66573a7a2eb7e4a31f3048945a4ccaf

          SHA512

          c99883c1bd1567899478023aa49b5d74a731af6820d8be1ed66fb2f266272af4cf819bec9005595aea941b199751bdc4a274d5fc99fd7b69ee323ef4b49f908d

        • C:\Users\Admin\AppData\Local\Temp\{ADF9124D-08BB-4766-A58D-4099761A30BB}\_Setup.dll

          Filesize

          26KB

          MD5

          f9f3ab8156e046c99145bcdb5a9a9eb6

          SHA1

          01e539e9ab840de7ac07ee17bd3305fe92033010

          SHA256

          d427d09c61ce32bdad5b7c71737a3a91974a2c3db11fba9f129e866d9b8ce4ae

          SHA512

          74eb1835a8315db809a9bc403b058867851ef77fe458e01f026b874f054115973b80949f706003b4a2958f463f4384c623792395720924dada475039b60d4d5d