Analysis

  • max time kernel
    5s
  • max time network
    62s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28-10-2022 22:19

General

  • Target

    806660b37b9fdf4f9d44dfd7e2e88aa752bb47133aea58b5daf7bf4f0ef15add.exe

  • Size

    327KB

  • MD5

    0c739c4862d3739eaf7e846f3f992570

  • SHA1

    4d9b1bcb562977d4bb9fc2dd46c1d97c0835f1cd

  • SHA256

    806660b37b9fdf4f9d44dfd7e2e88aa752bb47133aea58b5daf7bf4f0ef15add

  • SHA512

    ad6f7371d5d0f81234f30a6ccc67c8feeb417dab4608361f8a9bea30f815e4b789e95d13a6dfc3b0beceeefcc7cbb3d8c90763acd9975d66756e58ab75b68306

  • SSDEEP

    6144:krKbUzkuvcBYC47l2xUVWg+L9evNYeey462O27pxu3Fam+etyp6mOz:krzkuveY3rVty9+mT62R7vm+ety0mOz

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\806660b37b9fdf4f9d44dfd7e2e88aa752bb47133aea58b5daf7bf4f0ef15add.exe
    "C:\Users\Admin\AppData\Local\Temp\806660b37b9fdf4f9d44dfd7e2e88aa752bb47133aea58b5daf7bf4f0ef15add.exe"
    1⤵
    • Loads dropped DLL
    PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu2C6C4279.dll

    Filesize

    61KB

    MD5

    10826df8900b270538c451abbbbecf45

    SHA1

    8a99d739338862972d1302a2a74bd886c10139d5

    SHA256

    3e88ff6c2f1725a5d30c920140497e907fea9095d19b1354c7fc46518088f6b2

    SHA512

    05cbbf27b46df8494eaea5c36b62a16f7de6c2aeeb6a8cd91121694d168a390377585b965d7d71422676f309fe7468d4a2f42affdf7d1330e60912b127dd88e5

  • \Users\Admin\AppData\Local\Temp\{44F68640-58DF-4D4F-AFA4-10FD9F15A4B6}\Custom.dll

    Filesize

    23KB

    MD5

    a0ee39de8f57a06551500e5301da2efd

    SHA1

    885aa6a085199871e2b0049b0f30310b851339f3

    SHA256

    9412196801920016a61ad1a42e0561dd232f9a1c19d6a6fe87f554359bf2107e

    SHA512

    14d07283a2e64504054ccc7029e6949b671a539f7bf91d043a1805c3e5e4abe4d9bc5b28ede8f13620829a90afa35f3c2b78a07760c941ab23eb8c5472710e34

  • \Users\Admin\AppData\Local\Temp\{44F68640-58DF-4D4F-AFA4-10FD9F15A4B6}\_Setup.dll

    Filesize

    37KB

    MD5

    09143bf4fdd15b8420c2f0d226b0a168

    SHA1

    6233bfc0cdcb75b5b7d7795a0a20a81364cbbf56

    SHA256

    16f8f00c86ee973fc6177379f6dc124981c4e1c974ef8e756ebba16e23da9d5f

    SHA512

    57ae523cc095e1d50e93d88d6e20652ba8c0e7f1bb5da1a7e7dac64f04f8c4ddd815f65f92aefdd9d06e4b812e1ebed27c795613680c8f75c4c191bebde999f6

  • memory/1640-55-0x0000000075071000-0x0000000075073000-memory.dmp

    Filesize

    8KB