Analysis

  • max time kernel
    3s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 02:58

General

  • Target

    80f9f633c741e30d72eb4c92c289da4f38154f9dd002823722f0a9c053a79f4b.exe

  • Size

    304KB

  • MD5

    df0c0be5195d6a090c9e361ef29003a9

  • SHA1

    7d4354ff512bd98fdc672118f7a39b428bead8df

  • SHA256

    80f9f633c741e30d72eb4c92c289da4f38154f9dd002823722f0a9c053a79f4b

  • SHA512

    4007ce9d35964081b477bf610c942941c1003995603728156552d8d827a65d42e46add34a89887a58d73c3390d74abe047be8286ec7b40cc1d3f03099af45a36

  • SSDEEP

    6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPd:Vrkuu6/eIo4tQW62T+uTwM6YVxm24d

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\80f9f633c741e30d72eb4c92c289da4f38154f9dd002823722f0a9c053a79f4b.exe
    "C:\Users\Admin\AppData\Local\Temp\80f9f633c741e30d72eb4c92c289da4f38154f9dd002823722f0a9c053a79f4b.exe"
    1⤵
    • Loads dropped DLL
    PID:748

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\TsuBB5C8D64.dll

          Filesize

          31KB

          MD5

          8a7d4bf5c23a012cb5a5fa7a7a1a73bd

          SHA1

          7f01eb077bccaea82c2a4576dcc72b2078d506a9

          SHA256

          518b591e2405a65c0ea1cc05d5d9a9ce2ecaae28e5af11b6fb0fe7e989165866

          SHA512

          58c1578addc644b8528501e808966b568ef23e71cfb66dbe0e0db197fa0811d79ac70bd3f01656a6754d89e6a63a3964e7746942240212a8dc298f1fb60268ad

        • \Users\Admin\AppData\Local\Temp\{935D552A-5305-45D6-A73D-1B2748BE77DC}\Custom.dll

          Filesize

          17KB

          MD5

          cda8958169f667207136ff36899db0d4

          SHA1

          f7a04ed5250628308baafc9f848bf20694df9e4a

          SHA256

          d870c223aa5357868985cc92fdc36c5406e5d42ec4c309496b63ce51aad6500f

          SHA512

          037de6e8dbc6aa593ca78c928f2f22e1696ad837b5b5a425656693d1ea8bd7df11a87905f693de4b63a83cf0f57272152acbf14a51c4896c966e86f2d0b610dc

        • \Users\Admin\AppData\Local\Temp\{935D552A-5305-45D6-A73D-1B2748BE77DC}\_Setup.dll

          Filesize

          44KB

          MD5

          435d6d5a03df62f9b80762dc0cfa2cb7

          SHA1

          3c654707afddacb3f94005de01b1f939b3caf1fa

          SHA256

          2c84b918820d6eb8d3f91841c2aaf31ab9263b663d070fae31c5ea7ab25dc817

          SHA512

          6422a8320dac60f3ba01d6dd27a8df26f26d501c8756ee5d6cb3b147e17887d43fed03cbf2b73146a66879b7753f618ccb01a8e66cdf7ce63f1ccd0c23ec7eed

        • memory/748-55-0x0000000075B11000-0x0000000075B13000-memory.dmp

          Filesize

          8KB