Analysis

  • max time kernel
    0s
  • max time network
    112s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 02:48

General

  • Target

    c4981a5499e542e77a5960bb2841580ed8327a4d6268eb8a8459abcb744d9e7f.exe

  • Size

    325KB

  • MD5

    e3978d9b646248317943cb7b1c303145

  • SHA1

    044ba4baeb252993260ebc031956ce00b87c7dba

  • SHA256

    c4981a5499e542e77a5960bb2841580ed8327a4d6268eb8a8459abcb744d9e7f

  • SHA512

    71222386a784b19981d502f7515f16dda5f0e0bdbc982e4f55547d3a4ee0ce434df58d41b637603021c3492217c3c6826593831140d9e5d9cce4b253928dd762

  • SSDEEP

    6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o6:cr1B3u6/eIo4ArVUBQCCYOqmO5o6

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c4981a5499e542e77a5960bb2841580ed8327a4d6268eb8a8459abcb744d9e7f.exe
    "C:\Users\Admin\AppData\Local\Temp\c4981a5499e542e77a5960bb2841580ed8327a4d6268eb8a8459abcb744d9e7f.exe"
    1⤵
    • Loads dropped DLL
    PID:1528

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\Tsu5097729B.dll

          Filesize

          22KB

          MD5

          445a3f202b4aed61684efc2047940480

          SHA1

          56d3ac832f7226b22249c6485e1a23f6976da907

          SHA256

          5f723ce8795a5158386a6d1d305dca85e99be20762d248df6a7ded3ba1932fa4

          SHA512

          bcaff9ac74cb3e80e770a556ed5f6d0840378455877a6e9adcffec6ae0fb16cac2043549a4995372221e02a4d56f971691806978f0bdfae8be576cd3c43e5321

        • \Users\Admin\AppData\Local\Temp\{FB04E9B4-9E6C-4228-A0C3-D64E20E7CB42}\Custom.dll

          Filesize

          91KB

          MD5

          736682c6d96bb1edc84e77041faae33d

          SHA1

          f8f6e20cd2aa23010b85ea289c3bc3cbdbc9ae26

          SHA256

          54346f2e36bdb512ef4f7d702f18e59a746f0b936786bc76a30e87de0a061f17

          SHA512

          fe24353f0f4acafbde7d8cec7a5078668f5e6cd0b06c3e0c96cb3fed0beb3c8af2becb1d97fcbb369ac38193827c8d8a440694c79b5da3180224377e38f53777

        • \Users\Admin\AppData\Local\Temp\{FB04E9B4-9E6C-4228-A0C3-D64E20E7CB42}\_Setup.dll

          Filesize

          52KB

          MD5

          312af616352f8e1701b8dbbf1f0fe8ef

          SHA1

          f1683163af2752a5b7c8e84d3ddc97a955d6870c

          SHA256

          3e892ed57fa2fcc9b95266222c9fbe51b3fdabf6241e803984e762f027b515d5

          SHA512

          ea03e80ae03b8a39d097c86e9d82e9c1687311d9dee7aa8fe57de24b039dde59ee485b4eb76498adfd575316d19df1067bd06cd0ed28c533d2105636762aa72a

        • memory/1528-55-0x0000000075021000-0x0000000075023000-memory.dmp

          Filesize

          8KB