Analysis

  • max time kernel
    17s
  • max time network
    24s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 03:03

General

  • Target

    d87dfa2b4ea8c402154556cb64afe60a4a03227f7f92b1c769bf5fa3856fdcbb.exe

  • Size

    304KB

  • MD5

    14656f9ca1ec0cccf4f7db6d7676e96e

  • SHA1

    01937ac9895cc8bcdad22d7227fc7cfea97838a0

  • SHA256

    d87dfa2b4ea8c402154556cb64afe60a4a03227f7f92b1c769bf5fa3856fdcbb

  • SHA512

    beb6f2a22e5dbfa2ed8a63a7fda5932b8f93a231a335b4462be4e08e878eb2fad893e9b0fac3c2b78328a5e5035e000003ea14011a062e4edb9c02fd3d5c8f0b

  • SSDEEP

    6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPb:drkuu6/eIo4tQW62T+uTwM6YVxm24b

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d87dfa2b4ea8c402154556cb64afe60a4a03227f7f92b1c769bf5fa3856fdcbb.exe
    "C:\Users\Admin\AppData\Local\Temp\d87dfa2b4ea8c402154556cb64afe60a4a03227f7f92b1c769bf5fa3856fdcbb.exe"
    1⤵
    • Loads dropped DLL
    PID:408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu99759C1E.dll

    Filesize

    54KB

    MD5

    89a05b0bb2f42d30736420fc8c2f8f7c

    SHA1

    3f164a16067d11fef361e3ade85e15dc767a5f56

    SHA256

    217a146b5e6afb430d16a6f9a4c63d169112b7560b49117515de5717e33414a8

    SHA512

    6455bf3d7d7fbd786e16bf62f6ce33fbd368e3fd6ef20972a095d67f3afccd680fe4c027aa58a57b97a6277c59c3f8625c593eea64eb7cddd246cce533931f15

  • C:\Users\Admin\AppData\Local\Temp\{3B3DC92C-D45E-44AA-A641-9C7CE0DEEBDA}\Custom.dll

    Filesize

    18KB

    MD5

    2edd1e44e678524daeb74cb6c47bd459

    SHA1

    2f824d09ae4ed3b10eb94823b8e39f2d00599466

    SHA256

    197649d0b7d4cc7ffcb02f1f177790d76fe7de98a88fe823e5577d4dbdc298e4

    SHA512

    6d45ba8a69cb0f48dd4b677b364f32bc84452f675fbe4ed3c8b2f0e29ebac8bc0e22dcb45c6df76efeb78f9bc21ab8f443d384fadfc1434b53a0eeb8cc7963a3

  • C:\Users\Admin\AppData\Local\Temp\{3B3DC92C-D45E-44AA-A641-9C7CE0DEEBDA}\_Setup.dll

    Filesize

    17KB

    MD5

    db40c174351058feeddecf1b7e7cae0b

    SHA1

    d03e0fbd9f818b9d6ffee9203d9d563d1c9bd88c

    SHA256

    f172013e9b2f26e84a02539520ef039a1c8f188ad1263687f3891cd67962e402

    SHA512

    a0b230075d6bfea651980d1e172b7b91145f3801f9dfa83ff90fb342e9966cad155ea8d50563fc2139f14dac2a3f1e7f67d960785816b1b6afa05b3cb948bb04