Analysis

  • max time kernel
    25s
  • max time network
    40s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 05:00

General

  • Target

    3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786.exe

  • Size

    316KB

  • MD5

    a90fb8fb21c76e5b7632478bc178f594

  • SHA1

    a149981c82d7d91c1d49b9dcae86a3277531c2c1

  • SHA256

    3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786

  • SHA512

    9e509e379bebbeb80755745d24ac48ec521828ceb084a3af8d2e1ceae613db074662c82538746323a8cd5497edea379ca069248e41c3fb84ac8b15d2379a6161

  • SSDEEP

    6144:jr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYN+:jr0kuveY3cY1cia66MGd0Vs9BdNz

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786.exe
    "C:\Users\Admin\AppData\Local\Temp\3e9639ee0115cf6115fe86a11e824aea4a8a66dad164a50c02572758ceb42786.exe"
    1⤵
    • Loads dropped DLL
    PID:5064

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\TsuB2EE2F0E.dll

          Filesize

          31KB

          MD5

          5eddef19940bc43d37806b385c314c4a

          SHA1

          2bedfe9c52aa05a634d59eda8b12f33c7059991b

          SHA256

          77c2da72f6396de69868fd6c133ff4322cdd0f1137c786df6de1774d6c2cec01

          SHA512

          d502100d5f3408fc9b9e7c8ade776f3ef1eb7bbb4967edc34f8db0ca2d563e93a03370e8f19e9c16a9d2915e3c72e73b814cfc3e9ad14ecdb94c762b43dc46b6

        • C:\Users\Admin\AppData\Local\Temp\{DF49C0C2-D7A2-47B0-A55B-9F8004AAE234}\Custom.dll

          Filesize

          91KB

          MD5

          52ffb9f31fcf351bed204ed2fa781954

          SHA1

          7acb17bc45cf6edc71726e59fb8a1d37eca51a55

          SHA256

          eb99eb74c3736102b174d6d7ff9afaa43bab8ad4bccfac53bb4dbb80392aa1d4

          SHA512

          841c2683068522077d6f347c17d59815bf5f94015d6b539f6a3248c00bfb8a56360c2c7b3c8960dbda497e76fb88f8859bb5c1a7f80b24fe03dbf00db187f4b9

        • C:\Users\Admin\AppData\Local\Temp\{DF49C0C2-D7A2-47B0-A55B-9F8004AAE234}\_Setup.dll

          Filesize

          116KB

          MD5

          356c0fb8093fc9ef7b30a2d533031c23

          SHA1

          90d98c0aca12f0ffcb37f6e87db97c61d68833fb

          SHA256

          db77f6bcbe15d8b6c2b8dd5d4b79f0b44335ce123d1a2236e0981889d9908931

          SHA512

          2adab0abcf43157355f5b4c8f06bc7376c839b102c26f283ed3d0215ba3965c6dd82f9dc69da2ad4274d4dc0a5e6f4f48d29b7dc33cd04340fe32c3bcdf34757