Analysis

  • max time kernel
    23s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 03:59

General

  • Target

    4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b.exe

  • Size

    327KB

  • MD5

    f3e6b8b414e9801d808c9feb5cd305a8

  • SHA1

    8162d11bae5c665b75178b5991cc7e4f26839bfa

  • SHA256

    4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b

  • SHA512

    af1b6fedf034a6d885bce4bbd0fd04a330c082db35cac3dfe41c4bff9592c648833d8a7b3a0c8e739a9864a24559130b8381d7d53e4bfcf5fb42ccbef93ca637

  • SSDEEP

    6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FE:Jr4iu6/eIo4Rsw33AtsmQR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b.exe
    "C:\Users\Admin\AppData\Local\Temp\4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b.exe"
    1⤵
    • Loads dropped DLL
    PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuE1965BF3.dll

    Filesize

    43KB

    MD5

    2683abb9f5381aee04a73137bacd6f8c

    SHA1

    eecfc4ecf87e996a884ae90a0d4a313805e08dbc

    SHA256

    3ea0b61c47eacc31c63f66bd5c27d9b4a9229cf2ed8c75bac0c2ed19c14f5e86

    SHA512

    5601898453ca201d0b6508bf7b383940ece18e376166fb047e26a50a22143c18f99551e1a30efb94281028fab67027996da0ddc300687da04b2696249a549fb2

  • \Users\Admin\AppData\Local\Temp\{94051B71-B29E-4F85-AD6E-FABC4FE63987}\Custom.dll

    Filesize

    22KB

    MD5

    f62b27a831fe97d59841b723ec4c2929

    SHA1

    fcac368fff0dbb911f4c0dd8b1441587075e2b54

    SHA256

    26c8e73ebc00d41fd498aaf50c9a093b4ba01957b1e106a17cd577f6af977571

    SHA512

    c2e0bf779995688e0eb38facb7e984661990f92666c5de6d45f0d9332f38450774763709d556d4b52b1318abdfe01c7ebfd87dc59e24c603c64528eeae1201f7

  • \Users\Admin\AppData\Local\Temp\{94051B71-B29E-4F85-AD6E-FABC4FE63987}\_Setup.dll

    Filesize

    20KB

    MD5

    12442d04bc3cdbbe7f102af2dd6e447f

    SHA1

    65b741b4a3b9328a6cf768dbb337ac5294e024ba

    SHA256

    3bc3fbd7c399853b4175f7344c7972fc51390eff3a40d9ffde27a5c948efb641

    SHA512

    dc4e20b3807319569ba7962293032231a3faf6b3f67aca296f96a2cf9d0bf5b2c5431a382218722113b6d4ac8affaa9c264951074181c908a66384b9a2ec47e9

  • memory/1956-55-0x00000000762F1000-0x00000000762F3000-memory.dmp

    Filesize

    8KB