Analysis
-
max time kernel
2s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 03:02
Static task
static1
Behavioral task
behavioral1
Sample
558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe
Resource
win10v2004-20220812-en
General
-
Target
558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe
-
Size
314KB
-
MD5
dec7481430e2b38da5d52cf730f3d5f7
-
SHA1
89505309d5439a46c8dcd4e6c8927ed783224c92
-
SHA256
558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0
-
SHA512
3f11abefbc59fa3ae41248f386931500031652a73798ce649bdf47e8c0cfe86a72568d16db3653da64767959734c27192229e7e970e629333e4f5bd9d51e39b1
-
SSDEEP
6144:drYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs59:drdkuveY36kjZP/XKxlSZAH0
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 1088 558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe 1088 558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe 1088 558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe"C:\Users\Admin\AppData\Local\Temp\558a10a04f3f8b20cec832842609f47b9561b26722743d2cbc2334720e52c0d0.exe"1⤵
- Loads dropped DLL
PID:1088 -
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\_tin5331.bat"2⤵PID:812
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
368B
MD53a9830a2f57ef1e602de02bd9cc8eb56
SHA15135a0295755e536b833c6c6010900ff99cdbabf
SHA2568d138bedf3228f7ef9405940526a73f49395fd2917aa22e7d5596297e222da42
SHA51287ed85acdc1509bb02e437f50e7a90695f66b2a7a996a526f0310ba277de9ce8d7343983e2ae0b5dbedcca832bb90da802d7182972f1b14be0a203cfbd14cc41
-
Filesize
50B
MD51d460974cade289cecf964af7dfc34b5
SHA1d5868c20895c92af52d391f5574b65f21e1f1b0f
SHA25621c117dbcac11705f0b13ba1a22fac8b86b5b02102d12d0f264d9b815223d88c
SHA512ac5cdc4136af67184005233787e9506dc852f29f4ae13e152176551aff16d9e4884a45e69c82a1eb8aa570972d2231de19dbfa2ff70881455749bdaaf2101999
-
Filesize
15KB
MD559d77081f0b113f3573185b1211a9d37
SHA1dfdaddd2a4d346996e2875b7787224856fdcd142
SHA2566a8ae47daa69b0074fd3b1f610fbc2271c0619c304a2992b436bd0f89b109c42
SHA512aeab4a142bd632bf633135e66541f607deaae8d5c5c9788b550ba3df724033bba07393aef10a6171bd74572e140dd92330b13b23523aa9a5f475f23d3dd564de
-
Filesize
11KB
MD5757918c12ea5fc5c473e216ff3bd691a
SHA1be80399e7827fc19045299200096ee42f50f6907
SHA256b274141f936f7fbd59d2cf61c01a701499641436ee0e851e79a9dd369ab67260
SHA51234323cb1269960f2a632cd6b8b7cba61acb942170c2db9da47890c893fc7f815285fd238f91aca78eecc16cd39d9967abf2932cd614af19b6894633e65ecc12c
-
Filesize
49KB
MD5a354a1bdb698aa6a4aada0a59bf2ef7d
SHA11b64e2b15b22dfa2a88aec37827bd3019b03b409
SHA25680d67cb2734669bef95b6975e8289bcea28ee3f990615dcfe176a1e708771629
SHA512ba41a1579338096e5567b0a83321b80d27ad361cf884538475e90f80b7df86f2ad80775a3bc1e09f2e315eec9a5548fdaea94de89c0f9700ad4583e9c61b4cda