Analysis

  • max time kernel
    6s
  • max time network
    6s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 04:52

General

  • Target

    d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee.exe

  • Size

    327KB

  • MD5

    b923b7934af80dc370706fded3b75c6b

  • SHA1

    44f661bdc174aff75c19895a4eafe1a50ae0a667

  • SHA256

    d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee

  • SHA512

    1804dcadfda7c7e27fa1f20723bb72c369fe63f9372f94f9a0b86d9e2d59250da9b66166670c9f2d129c83484d9e18261c60f8d9cc55be91c4f66e6b2d21ca14

  • SSDEEP

    6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fd:xr4iu6/eIo4Rsw33AtsmQQ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee.exe
    "C:\Users\Admin\AppData\Local\Temp\d0dad7f4c3dd3a934da40f0b7031919344ae87d8b965d7566d851b979a9219ee.exe"
    1⤵
    • Loads dropped DLL
    PID:4840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\TsuF0F475C7.dll

          Filesize

          22KB

          MD5

          1ccf5f337d4d9bff45e6414c0ca37e97

          SHA1

          7699557041397bcfe0d0e641389a144caf72e1db

          SHA256

          5bec4be22fc9905cb73fbde5215bbec5aecdeca364be92c81d504e7b4a77cb82

          SHA512

          b6d98a0b506aba2420656df52c2aef95b40c994f472b7baf2b07f9dd3506b408dd886ccee0f51ff20b92d1cf691d582dc2a99717d76c87e1b7e2e142ac04c09c

        • C:\Users\Admin\AppData\Local\Temp\{E328E592-6D4C-48B6-AA5D-256E38CBC764}\Custom.dll

          Filesize

          35KB

          MD5

          370a53904299afeb25ddb4d85df30003

          SHA1

          7e31eecc56ccaa5a36f742002dd04f31584fd983

          SHA256

          3b381a2e5094fa6131cd1bf9e881f04a48473663b0d6a0312126329b571467a0

          SHA512

          70a1519836109c5d6d5f63d9df7524a82dad25e0db75de00cbf9efe644eb43f3ebb459f355eca3873e72f5ed03015ef87c2c231d23e983a5b18140c73b8a5e9a

        • C:\Users\Admin\AppData\Local\Temp\{E328E592-6D4C-48B6-AA5D-256E38CBC764}\_Setup.dll

          Filesize

          52KB

          MD5

          0b2354196cb321b76cbaa1db0a555c07

          SHA1

          963e3b0caa8eea7119f77245ba7754fbb4a2ca08

          SHA256

          42e9d73e9c9091795bb7009b84780031153e839d5fb149040e3443bd2cc242e8

          SHA512

          18027ff42f919d4f1a1515f56833133570db7feed1b4b9f4e0ff9c16fe0465eeb0d6a8f4085f2d27858cf4ea13dbd2993db145d3aed36b52753cc1e8bdbae6f1