Analysis

  • max time kernel
    11s
  • max time network
    64s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 02:20

General

  • Target

    cd00a7a21f3508b6085956ae28df68844254a9c62b1205fba111d5493cbdfa8a.exe

  • Size

    312KB

  • MD5

    4dfd3fcfa23620f46679a9d2ec157b88

  • SHA1

    55af7e3d1216dcf6993a63bd3cb56992cac50fd0

  • SHA256

    cd00a7a21f3508b6085956ae28df68844254a9c62b1205fba111d5493cbdfa8a

  • SHA512

    2f1202e194460ba98aa504a1139f34ef2a8f33d9229677f6603c1260d9cd26e78b342dfb7ca902de9b50ab2739cafed731824af75dfe1600dcaaa06433756dbd

  • SSDEEP

    6144:JrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iqo:Jrkau6/eIo43ts7KcXgXAN7ih

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cd00a7a21f3508b6085956ae28df68844254a9c62b1205fba111d5493cbdfa8a.exe
    "C:\Users\Admin\AppData\Local\Temp\cd00a7a21f3508b6085956ae28df68844254a9c62b1205fba111d5493cbdfa8a.exe"
    1⤵
    • Loads dropped DLL
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuE4D97178.dll

    Filesize

    20KB

    MD5

    eaa9600e9c44f2f767b2eab93a18f972

    SHA1

    aa6abb162166100bfcff45eec04ebc9af5c4d7eb

    SHA256

    a945ec4b956c9815eab81c85d9aa2c85186c55eaaeed2ea596fb7d34dc3ec401

    SHA512

    f73a979ed2bce18e2bf3f48178347d3f92056cf7f1fae1674231ca30c1bac16fd47038ed02127b9091904e22d2f0e76822651eb94bb29fe462d3b37882d90bf3

  • \Users\Admin\AppData\Local\Temp\{DE3184BD-8ADA-419C-A377-C2F805D2A64B}\Custom.dll

    Filesize

    28KB

    MD5

    f75d069248cd386812c611ea768f9822

    SHA1

    25788efd98ec2b178d9badf17b16bc2664e4a3eb

    SHA256

    dc1e66973f50496752cc046dc1b6873c497bc0e981f9f0faf368d648766828c3

    SHA512

    7666480a4ce2dd92059bc11f48f400a98a39daa8befc86b7984a17b4c25386375fd2b335baca583c484fe2c121d803ef9cdfc0bd74ac29575dcd24b507a83392

  • \Users\Admin\AppData\Local\Temp\{DE3184BD-8ADA-419C-A377-C2F805D2A64B}\_Setup.dll

    Filesize

    4KB

    MD5

    9cac43bf056d29aee200d4beb3c06396

    SHA1

    15c7e3f0f13817ce2b5f4a2dd8ed71572db5dfcc

    SHA256

    d0a4c2208639ca5746d5e92d462b180984242748c2fdd4d71901d00ef7861b4a

    SHA512

    ab96b3d79fd9b7d510aded54a157f6795e79ff28eefac931aa2f6c04b454d683a118f2dc795a78946527a56fe112ef508bf9653fdc63dacf52d26d17e64a83cf

  • memory/1932-55-0x0000000075F51000-0x0000000075F53000-memory.dmp

    Filesize

    8KB