Analysis

  • max time kernel
    4s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 03:29

General

  • Target

    ae62fef9f688315958257ae4e4eabcef822648178442cfd5efa4a426c4514584.exe

  • Size

    327KB

  • MD5

    903a32a90187045504eb71693eff4cf4

  • SHA1

    dcb2a609b044705522ac0122fca7a197c1f47d64

  • SHA256

    ae62fef9f688315958257ae4e4eabcef822648178442cfd5efa4a426c4514584

  • SHA512

    c25cb4fa36c5a90e883b69d1055f68b3ae8e267e7cfa287472019ae63b59da91277716099a69e47170f852480d35bef98f42f97c77a1daf36db6bdc756e98d6d

  • SSDEEP

    6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F2Y:Jr4iu6/eIo4Rsw33AtsmQtY

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ae62fef9f688315958257ae4e4eabcef822648178442cfd5efa4a426c4514584.exe
    "C:\Users\Admin\AppData\Local\Temp\ae62fef9f688315958257ae4e4eabcef822648178442cfd5efa4a426c4514584.exe"
    1⤵
    • Loads dropped DLL
    PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuC2F14C45.dll

    Filesize

    24KB

    MD5

    dacc120e72c52ad9847b451f14a8933a

    SHA1

    394c3bf68f88fcd3cbb2769afa5854be365b8634

    SHA256

    9f12e08e77ee0cf8c3cb3f151675e022c7a39b562711748461c7f2a59d6f7e39

    SHA512

    c178929b28d22f24432e224873b8f73c378357250b95a6fa488446e65ac790818c4031a17033fd48fe2f2841ac1befa63fc50a4252a79254f59207046ab43648

  • \Users\Admin\AppData\Local\Temp\{EC2E4EAC-3136-40EE-A205-791437CD6C5A}\Custom.dll

    Filesize

    16KB

    MD5

    b88e0e9f8a685576d09429647ffc1b7c

    SHA1

    720958ea48b56e1857246a6b488881ac3c81f1b5

    SHA256

    e519a6a2f229ef09b27db2204ee32e11c68ed0dd41f1fc74f96b4e26102d0b88

    SHA512

    9363ef972362de904533bb500cb5e7cf8716c687855395e0123eaaa3d945315851dd6327c0306eae9d060bce3fb577b66e79c11701e42f7432b8d1ecbe6ed44c

  • \Users\Admin\AppData\Local\Temp\{EC2E4EAC-3136-40EE-A205-791437CD6C5A}\_Setup.dll

    Filesize

    8KB

    MD5

    fc246c4e1b72b8e850094996fffa37ae

    SHA1

    abdf3f0e62811259630ab77d33d906b3a3d2300c

    SHA256

    13974f371f626a299d050a91280592e942a0d99c20a1e2e9580d5f882567e585

    SHA512

    d8f07ac200765cd97627042a991f6d038e87811d6b1b54a5669c12b1122378617526ca97d244765e33f10bb8b03356fe5d688e14a641b78e141a908c72c9128b

  • memory/836-55-0x0000000076401000-0x0000000076403000-memory.dmp

    Filesize

    8KB