Analysis

  • max time kernel
    19s
  • max time network
    75s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 02:48

General

  • Target

    9d798850b99a43eecac967b689ff959a19fd78ea01927472a99d38ba32735f44.exe

  • Size

    304KB

  • MD5

    f1c7ecf0100e7d92acea097a51d3ac2c

  • SHA1

    0b442c93a2b4134a37b9b2554e35b4c21722681b

  • SHA256

    9d798850b99a43eecac967b689ff959a19fd78ea01927472a99d38ba32735f44

  • SHA512

    64e66385f077730b163cb029a59237424c98957c56451227fe1e2f6f243f33a5de04bdfc95c3e0b7932e2f586976e4c448e7820c89514ec70570dd02b02c6c1b

  • SSDEEP

    6144:FrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP7:Frkuu6/eIo4tQW62T+uTwM6YVxm247

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9d798850b99a43eecac967b689ff959a19fd78ea01927472a99d38ba32735f44.exe
    "C:\Users\Admin\AppData\Local\Temp\9d798850b99a43eecac967b689ff959a19fd78ea01927472a99d38ba32735f44.exe"
    1⤵
    • Loads dropped DLL
    PID:4136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu37A11156.dll

    Filesize

    25KB

    MD5

    97ed74c994dbf195d7b4f3d80155c215

    SHA1

    69e715adebc5acdca9582b0816c204d3663ff3ba

    SHA256

    6bcf7bc43763e4fef37e668bb0b41110c428c6b40d43f7db536ea4edbe7a6e20

    SHA512

    abccaf464cc924ff58cf60806e1d5270833a7f955b013e1699107adf54b2ff71e02813b9976573e59c47bfa5a51f67190cfe24ee992d3af9eb2159892fad550e

  • C:\Users\Admin\AppData\Local\Temp\{E142C365-8E97-41FA-A311-C6B53AA1E193}\Custom.dll

    Filesize

    73KB

    MD5

    56e4e9e881524397c9f6dca5ca70b1e8

    SHA1

    8ad77bad589591171eb94a593c3814a3b742f79c

    SHA256

    2e6e83c80a887c82c890053f491e0cb24074967b5ae7af7c8c4bcae78af2a22b

    SHA512

    130c83dfc0db281bd7999edc6c295f122ab3ba00c69353daad988866680a6994365874eb29122b8473930d2ba0df58bdfb27eb8897a819f79c8b8e31e6597700

  • C:\Users\Admin\AppData\Local\Temp\{E142C365-8E97-41FA-A311-C6B53AA1E193}\_Setup.dll

    Filesize

    75KB

    MD5

    a0363cf0695252bd3bf46b66e19cf322

    SHA1

    362f4ff938bd64ad06233e37df0f5ab659ad31df

    SHA256

    604225a4d3a7ed5ac077fd07915913d2bb214e099720b34a445879b6238f143e

    SHA512

    466d3811d52d3ff97c485ad8e2ff5b73486f90dd034878fdf7a5379c3625971cc2a78de2a3d230e71cfdd2a860ea3a866c02a6f2dce2d6889df51b9480d06123