Analysis

  • max time kernel
    54s
  • max time network
    181s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28/10/2022, 22:17

General

  • Target

    9c2bd331dffeb53873de75343c1b734cc1c7c68c6b7f36697ab97a52bc80b124.exe

  • Size

    314KB

  • MD5

    0ab22178f24dc08bb2d24f42ec733010

  • SHA1

    7fb074d740fbb70d0129314e063b9d92a7c16d93

  • SHA256

    9c2bd331dffeb53873de75343c1b734cc1c7c68c6b7f36697ab97a52bc80b124

  • SHA512

    fec56597645eda69acf56b374fab5041756a955994d017be490369c6f3618a99bacd7dd936197ea5e29f47ff04fcc082adcd7c43ed93d0764572fa25c65851a6

  • SSDEEP

    6144:krjbUzkuvcBYC47l2xhPAj9yshh1/9CSFuXWzMJSeJMLBz8xp:krIkuveY3uPw4shT9Nnz62xQp

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9c2bd331dffeb53873de75343c1b734cc1c7c68c6b7f36697ab97a52bc80b124.exe
    "C:\Users\Admin\AppData\Local\Temp\9c2bd331dffeb53873de75343c1b734cc1c7c68c6b7f36697ab97a52bc80b124.exe"
    1⤵
    • Loads dropped DLL
    PID:944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuB5C96D5A.dll

    Filesize

    45KB

    MD5

    144a2f2cff5c3c2c242ae911cc8f9b5f

    SHA1

    b40d04743ddaaac2b877c8bc03c0847a5a6b0fe3

    SHA256

    99b4ca522463e34739e03518f5be57fb3b4bfd6a762214237da07007d7ac996f

    SHA512

    8c9b56c141e010647884e338da150d9665c33734d29822a7c51d915e903973f930b8c351a102ecedc8544f19198c59c50fb950ba6591ccf6d727b81402ad43bc

  • \Users\Admin\AppData\Local\Temp\{C90E9669-49FE-4E0E-ACE5-01DC12EDB49F}\Custom.dll

    Filesize

    38KB

    MD5

    06bd47d0b7d5dcbb7454e6616171a6be

    SHA1

    8530263a683c4aa2cf9d0e2161c7200a38115f2c

    SHA256

    a530f0bee29974432cd84d4038ab0645ad22152357d9afe64028836a9c3a17b4

    SHA512

    a711b4809a5746bb35551e4688f5460e47ff3bd75493b39814ff977805d69e98116ba5129d5bddae91ceefc76b200fbaae75dc8c0b53ea32be111fb06cd8355b

  • \Users\Admin\AppData\Local\Temp\{C90E9669-49FE-4E0E-ACE5-01DC12EDB49F}\_Setup.dll

    Filesize

    23KB

    MD5

    d49c2928297ff440f60689f6d8d414c2

    SHA1

    737ff4ea403a9606745cab48f23f9132daacb569

    SHA256

    2c7331b22e74cc4954a6cb8c867b4b3234300b6aa7815162fa6362909f98e3f7

    SHA512

    05714c47ecdd2437c0331327f3c7cbef1e6fad64e05ae855d17b9ec990bca91508053afbbce781da79945f102a6c20f5f330b7c514ba72a02aaa7c839b5acafb

  • memory/944-55-0x0000000075141000-0x0000000075143000-memory.dmp

    Filesize

    8KB