Analysis

  • max time kernel
    5s
  • max time network
    6s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 02:03

General

  • Target

    d816ecd0777a3c17b7c4a3b47a110474e92a49f5d6ea35001dba273228aaf6a6.exe

  • Size

    313KB

  • MD5

    c1e909f440c29e2c1d24e937e5430f05

  • SHA1

    122719dd1afde16e96a81f5377470274e27dca02

  • SHA256

    d816ecd0777a3c17b7c4a3b47a110474e92a49f5d6ea35001dba273228aaf6a6

  • SHA512

    2da760c0535e33985c9e3c58f86cead82d12c105876c49b85dccd3522d0d6dd15bbeaba173974b4c850eaba7b7addd7b0e34e4ede8e1c700c8298f97641c5ccf

  • SSDEEP

    6144:wrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDG:wrfu6/eIo4jVW5soVCcQovoO0DJM+Eh

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d816ecd0777a3c17b7c4a3b47a110474e92a49f5d6ea35001dba273228aaf6a6.exe
    "C:\Users\Admin\AppData\Local\Temp\d816ecd0777a3c17b7c4a3b47a110474e92a49f5d6ea35001dba273228aaf6a6.exe"
    1⤵
    • Loads dropped DLL
    PID:5048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuCAFF1E11.dll

    Filesize

    20KB

    MD5

    229059446759b41ec5b21e1ef787562f

    SHA1

    03092c6f3308790f059e08199d02072df003aa8d

    SHA256

    c45e4c8e2d1644533c55ecd21c725428d320594a6f009ec163b6161446f52c62

    SHA512

    0565956b15050245420d9e3b53a22625767849bc9f618629f88abf5227b164bb1c8243bf6607e45b542121c13878178badaf9c6dcd445a2425b25ec3aa73e626

  • C:\Users\Admin\AppData\Local\Temp\{3A1E5BD3-5046-4EFD-AC16-1864E1FD7925}\Custom.dll

    Filesize

    32KB

    MD5

    594c9b2f67198e5d4190f56531a3e52e

    SHA1

    d1c5ff4ca213f6d682d900e795359a111ca957f6

    SHA256

    81ee56568525c506abc43ebc4105bff85e781c109e7cb608a1cc8406d32c557c

    SHA512

    e9a46890bd56b2bd61450e69172c3f631a8338a1e8355fa3460240827833b02a42787f6839592048b9ffc904455e22c228fc3ec64706c45a29bc96acce36d65a

  • C:\Users\Admin\AppData\Local\Temp\{3A1E5BD3-5046-4EFD-AC16-1864E1FD7925}\_Setup.dll

    Filesize

    20KB

    MD5

    b3f38ca107dda3ae080a29e6131e5a39

    SHA1

    7029a03a4c4df91796cc4ae911b78334de854858

    SHA256

    384ba205e14a19ceb26550cd64267f22e09ee44a5db229d2f40c265fb0766bee

    SHA512

    0ffd092290bf0fdd2e1b380dfc949e58a2fca66287b753651d409fd04ff0b5d57864240fd7f5515fbb07a5ed4a365ba046648b23ed38bcc92940952ec9315452