Analysis

  • max time kernel
    59s
  • max time network
    159s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 04:16

General

  • Target

    499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85.exe

  • Size

    313KB

  • MD5

    bcc11e659bce817533b43dad3c23da61

  • SHA1

    cfecfe4a4f718dedad1f17e96388cf6933fd78ef

  • SHA256

    499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85

  • SHA512

    77f7db44e55c55207a6531cf7832fc2a69edbafb68fd42a85599e1c92f227d829d1c0ba808741eeea7fdd6008ef528801c12aa846dc0012b480f2e014e90484d

  • SSDEEP

    6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LH:fryu6/eIo4vMResyEf0uP9d9UG0H

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85.exe
    "C:\Users\Admin\AppData\Local\Temp\499a7aae82fd4c1903c92c4f1c0564886fce70cb94ab3bd33395e0e5fe2f9b85.exe"
    1⤵
    • Loads dropped DLL
    PID:1992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\TsuD74F297D.dll

          Filesize

          27KB

          MD5

          7d96698817f7573fc81cc7eaa578b3c6

          SHA1

          1204a4aae95a868bac7e74fe4dd336149859ba70

          SHA256

          5a22c47de0a320734a4ea4d99e8d6261151096ee6a3f67d2e98ad96aafb38e4e

          SHA512

          9d4852a68335f9594e7be8086031209690db689135408d8f76614aae59a10da4cfeee838399e448812a51c5fc040ee24bd6f54a7272359d248df2a756e389f00

        • \Users\Admin\AppData\Local\Temp\{322B3290-F72C-4E62-AC89-BF0EE9C81066}\Custom.dll

          Filesize

          30KB

          MD5

          a56cf143c72cee94f418548afed103e4

          SHA1

          65def5a6abf93abfa776414b24aebae80f2843bc

          SHA256

          024f4db0e479be41f1b480eb24a6db967be77bac64e12ffe15e8c324d2c022a7

          SHA512

          6e91cb952cc2b2b98e6ec38196ab4c861904e1e503e70ad42ab94de410cdb5290b9e82135bf5878a55ae20ec6f2252f0d13c352122ee3dc3967d887047530bcd

        • \Users\Admin\AppData\Local\Temp\{322B3290-F72C-4E62-AC89-BF0EE9C81066}\_Setup.dll

          Filesize

          23KB

          MD5

          00044de893b2e6e8aaa4fdf3a8df7cb3

          SHA1

          e8fc452e37917c3faf03a39457730f95fc9a31a0

          SHA256

          f62dc84d175b79bef83e2d8bdfe8a93fa179ca5dfdf3aeab2c4a7c956f68bb28

          SHA512

          6d80f4be89d8dab81b6ecec15498583a54e3d975f5fb0484872349f1fc0ff6d18d782362b9635060150423a58a8afe73b1d0787e5d0e3d4e15c0706e8dbbeabc

        • memory/1992-55-0x0000000076121000-0x0000000076123000-memory.dmp

          Filesize

          8KB