Analysis

  • max time kernel
    2s
  • max time network
    72s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28-10-2022 22:21

General

  • Target

    56db2fcae24adda3bfa794bd5a099150f58a0abe25d996853481a1a811450a36.exe

  • Size

    316KB

  • MD5

    015f9a49d40c662256c4d3dedb53b080

  • SHA1

    fc1e541dcf33948bbdec8275f12c1115ded43834

  • SHA256

    56db2fcae24adda3bfa794bd5a099150f58a0abe25d996853481a1a811450a36

  • SHA512

    bab142f004f98d7e9dcef4ed3a9fcbb3c1ef1a485172f9383058d3180300c47988a4a90a31ac42e4b69f94675f24e909b72a3128cb32826b6a5947044afad420

  • SSDEEP

    6144:3rFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMn:3r2kuveY3ZF31N4XxZjn

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\56db2fcae24adda3bfa794bd5a099150f58a0abe25d996853481a1a811450a36.exe
    "C:\Users\Admin\AppData\Local\Temp\56db2fcae24adda3bfa794bd5a099150f58a0abe25d996853481a1a811450a36.exe"
    1⤵
    • Loads dropped DLL
    PID:1452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuD399D861.dll

    Filesize

    22KB

    MD5

    f7655ba57a06bdd7d9a4ed4127bf2345

    SHA1

    3a604b02b9b6c39d440d528838347bc264e39d3e

    SHA256

    8b52dc3f23b2e0c57b0935d3f34e80f3501d7cb41984042f930dd7384ee41027

    SHA512

    9b1ca3903964801527154244831c65b3fe050bfcb85affec019a074e72c98110641d74008f693aa726900cf03430d3bae35b20ebab8073c850a0e1fb58756d02

  • \Users\Admin\AppData\Local\Temp\{F76544CA-CE51-40E7-A20C-86732C86663C}\Custom.dll

    Filesize

    36KB

    MD5

    ff78b227ae50a246fcc815f7b9b00d87

    SHA1

    0e0f144ae00833f21096e91da4218ae9cfa096f6

    SHA256

    6f9e7fa512944344c7deae77baed3970e569c569bcace8c1b8008058c453469a

    SHA512

    5735c537cd36f11941125acb08b2abaa70b0834a8a576373b83df87af0a4d4e6ea5ce1e96c8febc3931f121aa893b36e0ea71d8cc65bdd0499fe50423a54aff8

  • \Users\Admin\AppData\Local\Temp\{F76544CA-CE51-40E7-A20C-86732C86663C}\_Setup.dll

    Filesize

    29KB

    MD5

    41f72427cb8308a7b2df9d17f5521fb1

    SHA1

    fd57574d6ba6d16a7984173943a5edeb1fa2feb8

    SHA256

    bef4cd98ce693b208d5c9ee08d233e878ef7a43318842fe521ac5f04fe7dde36

    SHA512

    d9316ead411f9c53d4ac81afb1d5a662c93035c939e10ddc40db7813695bbb641c3fa18ec9372d3f4503daf782feac454ec40ee4a7de9988463a4b4f37c1c16f

  • memory/1452-55-0x0000000075981000-0x0000000075983000-memory.dmp

    Filesize

    8KB