Overview

overview

7

Static

static

b170532739...48.exe

windows7-x64

7

b170532739...48.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    25s
  • max time network
    56s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 04:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348.exe

  • Size

    316KB

  • MD5

    80192fa48cd84f5d5f0dc1de65e4e33b

  • SHA1

    8a91c9452719d611321fe3c8d88a0c283746b4f8

  • SHA256

    b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348

  • SHA512

    0bee7d3ad33f7edb6f87f33132951137d1a2c68c35c06d8934c585cbee907ae844682eb30544599e4830fa5a455555938d5e3093d9d55fd48d72f47f5a15ce6a

  • SSDEEP

    6144:CribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xu:Cr7kuveY33FJUo7MDkA6D

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348.exe
    "C:\Users\Admin\AppData\Local\Temp\b1705327394f18a76cf41063c9541c4c1aabb056fcb47279863758567465e348.exe"
    1⤵
    • Loads dropped DLL
    PID:2556

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu5C5F59D7.dll
          Filesize

          31KB

          MD5

          b23f2ef221da6176ae1f64883a9cf837

          SHA1

          ceb697187ea5e00a8bdaaabeefe464de96e01edf

          SHA256

          58d54af6c3c4330315e2a1e02f8c5976069aa97af326c218aafd1113507a49be

          SHA512

          722f2d277e4f4665a881c2d11936e05a4295affc55c7748726e04b07c97ca356429312f246d94307c4bfe4d61a529b9b7f3af1f3db18211454e4f3954f51feda

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\{EFDD4FD0-9A2B-4E6F-AC84-D209343E6D26}\Custom.dll
          Filesize

          11KB

          MD5

          b343f9e78c813cae8b07d347602653bb

          SHA1

          836cec0ee3022cb533695073ecc7bae140713c20

          SHA256

          71bbfcade7c0e225c441201df1e4b60d8de2b2a67591bc8e452300ef1c03a262

          SHA512

          4047982b2a4f07fe1f08d6bdc42e28ccdcef4250e6102ebe15f22150248c670c3ade73d40edcab95ce7714e0c9e855fb026cf4825ff44468aec4042df989dbfb

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\{EFDD4FD0-9A2B-4E6F-AC84-D209343E6D26}\_Setup.dll
          Filesize

          33KB

          MD5

          cf5307ad002e59dca0cff3bfcbb754a9

          SHA1

          a1402db273991d043538bb4aa025b1b87ebda6ae

          SHA256

          c6093ce257d0137c0cbd65f161ef8ee537c70eef6ca5913d71c823d66db86e98

          SHA512

          13e0e5efffe488879191cc529fd10dad9f2e98d38950bde250faa6aa9b22f3f449f3e738c51fc5e660cbc2bdb94105604269cccf4ba72374d747ae1efb20195b

          Download Submit