Analysis

  • max time kernel
    43s
  • max time network
    83s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 04:31

General

  • Target

    2138c5a1f2eadff150efea2a64f3b5d244ce2204f99917fd2c34cfcf7a4d4d3d.exe

  • Size

    313KB

  • MD5

    b2df4fcfeb08e77bb7ec887283d0b33c

  • SHA1

    f9831fb2ece9c6432f5d25ce4bb045bf1fecc2c9

  • SHA256

    2138c5a1f2eadff150efea2a64f3b5d244ce2204f99917fd2c34cfcf7a4d4d3d

  • SHA512

    9807861b47ebb06ab33da08308c6e17d86bb5ca5e46019dc14459b31f7843b60a32df6fda87a76b4e33171a393a0a5e7dba6c23000f303d5288d4976c2487869

  • SSDEEP

    6144:wrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYo:wrk4u6/eIo4nlu7trxFtApfgMyrpjYo

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2138c5a1f2eadff150efea2a64f3b5d244ce2204f99917fd2c34cfcf7a4d4d3d.exe
    "C:\Users\Admin\AppData\Local\Temp\2138c5a1f2eadff150efea2a64f3b5d244ce2204f99917fd2c34cfcf7a4d4d3d.exe"
    1⤵
    • Loads dropped DLL
    PID:1216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuE8F47A73.dll

    Filesize

    29KB

    MD5

    0ece7b4c03eaada6faacbdcaab1e171e

    SHA1

    995faebf5f6f60e74d6f0bb5b16c3814158b14a1

    SHA256

    ff912be8f224aae451472f707c259ab04cb996fbff9bc96dd35c9f47a8e40031

    SHA512

    cee1cde7812e9de86582a0fcf663923990319a2cf3c40cf125f6434d66c6369579c5b9e3f8f70093b04f97cec62ef6257780bcca78a417e1456865c10a66116e

  • C:\Users\Admin\AppData\Local\Temp\{18F489B3-2E68-49FE-AB15-664AC317AB45}\Custom.dll

    Filesize

    5KB

    MD5

    b49a8756d17842e01654477713eed3ef

    SHA1

    597f2cab1eeaedf12587308d7ca991ce870fe1f3

    SHA256

    f2cf36d038ac1e299ede19bf889d0c57917ae90b0a1db47a03f53464da119fb7

    SHA512

    c8ba12ab75a0201f51109712fbb5a927d3a4dfdee2898456678be3244585dfccd9acba26b947968df507c73249bd49ea254c96a2b620b0a486e59b86e8e84881

  • C:\Users\Admin\AppData\Local\Temp\{18F489B3-2E68-49FE-AB15-664AC317AB45}\_Setup.dll

    Filesize

    6KB

    MD5

    b8a53e00c90f68812264fcbaf5c394b0

    SHA1

    75b1c5e84d3f3450e0951b02391eb2796f67c2ab

    SHA256

    1d4ca9676f3ffa1247ce83e97e3c215b93c59979eac190566fdde563390cfe78

    SHA512

    43ff7eafe2f83e707fab33c75267938d13b1d0b3465ce3bf476992664f77291a8609637dcd81d0c582b4f6d3ed60f07740a0b21c7dafa5fbbb1411c52c0ce74b