Analysis

  • max time kernel
    46s
  • max time network
    4s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 04:06

General

  • Target

    e73ac553de21ddad0b67724a4a8b4c3166443a4c464181138221c3aa3e2408cb.exe

  • Size

    314KB

  • MD5

    428df79c3fd60b7b4103a2badcd543b4

  • SHA1

    33571b4b8b47ccf60a93f94fae098e7625bc81b0

  • SHA256

    e73ac553de21ddad0b67724a4a8b4c3166443a4c464181138221c3aa3e2408cb

  • SHA512

    78630986f030a5dc2c04a572e899f4eaf93b8e410af8a7afa90abbe7d36b25b67e964da0657b96810cbcb1924e927b01df36cbb6c56c47f7ef68573243e75696

  • SSDEEP

    6144:/rYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZU:/rdkuveY3CvI5Zdkj6OEu1HSU

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e73ac553de21ddad0b67724a4a8b4c3166443a4c464181138221c3aa3e2408cb.exe
    "C:\Users\Admin\AppData\Local\Temp\e73ac553de21ddad0b67724a4a8b4c3166443a4c464181138221c3aa3e2408cb.exe"
    1⤵
    • Loads dropped DLL
    PID:3932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu32C8E4CA.dll

    Filesize

    12KB

    MD5

    a79a31bf89ce08d8708945e0536e5d1f

    SHA1

    d6ad22d8560f7b77b3094ce53d1153bf87a388db

    SHA256

    b804d8dbcb078497b894bafaa47c4ae8efc66d4800af84c1d142255ba3976c48

    SHA512

    5fc0dd76e69c73b0c6d22c449e473a2a802d6e7d53da864ad21cb20d8e085d6740063957db04f61bf91c90bada3a790aa4c7daef1cddb5e2c15bf51c61ab8d99

  • C:\Users\Admin\AppData\Local\Temp\{669E733B-CF48-416A-A381-876ABD7D51CD}\Custom.dll

    Filesize

    68KB

    MD5

    99a03f954cc5f3267375f9b8e85b3c81

    SHA1

    2f90b76bc0869e14e064aa5ba1af3766deef1e0b

    SHA256

    faf50064490d2da54982f7df549d81da0c61cfbb6dd80f9e75cdaf89cea17571

    SHA512

    f058599bb1ed5a0815485d4b28aaa8ea580e45930173aea29983ae36414a80bbfa51ccfd55dcccfd795eb146040b6745e337c5053740532179730a85032f85e0

  • C:\Users\Admin\AppData\Local\Temp\{669E733B-CF48-416A-A381-876ABD7D51CD}\_Setup.dll

    Filesize

    16KB

    MD5

    463b9627cf64de8691fe5d005ffb1c3c

    SHA1

    be7c67c45d4e0ab8eefb7f206f5504cda4559b56

    SHA256

    d57be6406b3191a8ec1e22f42ec4af3e270d1fdecf4ef0d659c1ef9496911143

    SHA512

    6083e12752222d467a708de356e6d8388082754f2456ea243d626246fdff3661c0bad004a2d51c26eabd58e37c6af3f341e302c5ee54fdae421b397973301da1