Analysis
-
max time kernel
48s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
29/10/2022, 23:33
General
-
Target
1ac68e075ad783a3b44dcfa1a66d604f30403f96cf81f97a53641f0fb4154bd9.exe
-
Size
572KB
-
MD5
a3a3b0de23826c1b8eba1c628add5b70
-
SHA1
0d5ecb9be44ca30dacac5a1b0aac38841eb63c2b
-
SHA256
1ac68e075ad783a3b44dcfa1a66d604f30403f96cf81f97a53641f0fb4154bd9
-
SHA512
9c203404d8b4a376e5a88dbe6961f441919045b8b103251aa4320f0d8707a334b97d779d907c184f3d5a6e30b2293d2130d59893e8309ee69eb2aaf6639a182f
-
SSDEEP
12288:6luDk6701zRRaMMMMM2MMMMMJ3zKUSDyo1tjd:Lk6o1zRRaMMMMM2MMMMMUlDyo1tjd
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Windows directory 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\1ac68e075ad783a3b44dcfa1a66d604f30403f96cf81f97a53641f0fb4154bd9.exe"C:\Users\Admin\AppData\Local\Temp\1ac68e075ad783a3b44dcfa1a66d604f30403f96cf81f97a53641f0fb4154bd9.exe"2⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1ac68e075ad783a3b44dcfa1a66d604f30403f96cf81f97a53641f0fb4154bd9.comC:\Users\Admin\AppData\Local\Temp\1ac68e075ad783a3b44dcfa1a66d604f30403f96cf81f97a53641f0fb4154bd9.com3⤵
- Executes dropped EXE
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
484KB
MD557962c53fd52f78a1a9c23907e76df3a
SHA16fabf17b9f2a949b18ee19d77d3a50c0eaad5f5a
SHA256bc777d504d22bc6f3d34dfd729e610bedff86e8bb1cf53baa79d0b5da831d664
SHA512d9ae4425a0891069d76578e4623271aed6283bd320eee15b6cb8734cd079f29f661de4b459659c7f975a31c30c567e2730017505e569cc9d10ebae4d290331a1
-
Filesize
484KB
MD557962c53fd52f78a1a9c23907e76df3a
SHA16fabf17b9f2a949b18ee19d77d3a50c0eaad5f5a
SHA256bc777d504d22bc6f3d34dfd729e610bedff86e8bb1cf53baa79d0b5da831d664
SHA512d9ae4425a0891069d76578e4623271aed6283bd320eee15b6cb8734cd079f29f661de4b459659c7f975a31c30c567e2730017505e569cc9d10ebae4d290331a1
-
Filesize
484KB
MD557962c53fd52f78a1a9c23907e76df3a
SHA16fabf17b9f2a949b18ee19d77d3a50c0eaad5f5a
SHA256bc777d504d22bc6f3d34dfd729e610bedff86e8bb1cf53baa79d0b5da831d664
SHA512d9ae4425a0891069d76578e4623271aed6283bd320eee15b6cb8734cd079f29f661de4b459659c7f975a31c30c567e2730017505e569cc9d10ebae4d290331a1