Analysis

  • max time kernel
    3s
  • max time network
    5s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 05:08

General

  • Target

    b72bc65e4938d12022205f4edca4974dfacf2c20498d32933390605db69f5094.exe

  • Size

    316KB

  • MD5

    fb04ee714efe8addd7c7ee929e13b995

  • SHA1

    c446bdd55a6005bdf45f0f242911fd70d4a72fb9

  • SHA256

    b72bc65e4938d12022205f4edca4974dfacf2c20498d32933390605db69f5094

  • SHA512

    e2dfe240685077820b117b85a48eeab809f14d7145972673b99ff47a1fd0158f95a886723a255bd0ec88743c633a05a411a74821f91d1272f7da0e41f2213f18

  • SSDEEP

    6144:6ribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xm:6r7kuveY33FJUo7MDkA6L

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b72bc65e4938d12022205f4edca4974dfacf2c20498d32933390605db69f5094.exe
    "C:\Users\Admin\AppData\Local\Temp\b72bc65e4938d12022205f4edca4974dfacf2c20498d32933390605db69f5094.exe"
    1⤵
    • Loads dropped DLL
    PID:5060

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu7AB68EE1.dll

          Filesize

          21KB

          MD5

          177ac6f0a96a1bf0dc8328a44169d452

          SHA1

          b54c927a3ee72677e9df30958985ef3d740edd25

          SHA256

          ccdb1474642f1adfdd7033d53860fa1011d57fe2a868f77c6efe9990e4697aaa

          SHA512

          0240a06d168747be62ccb883df6c667ee5ab178bacf41599c227762ff560f5ec935c995cebd887d94de166d38424a3ede26b693c54e0b59cf590b7815ccaf408

        • C:\Users\Admin\AppData\Local\Temp\{2EEC5219-A4FA-4A66-A88D-ECD8F50F70EF}\Custom.dll

          Filesize

          23KB

          MD5

          e6696b5dfe1ba14c2adfe8e72fee32be

          SHA1

          dd7b105f51bdd455d421152ef20b83b31061a094

          SHA256

          c11355932158c0f6e474371f070eddf7128b65e275e6e10cac3ffd49631912ab

          SHA512

          d6b23871ab1dda8f37006fb59173c69c05e52ac943cb7dec3dc9dfa55d5222effc28fd7430c62664031f7444b5a77f0cd511a6ad547fa8431c395d0372d0536d

        • C:\Users\Admin\AppData\Local\Temp\{2EEC5219-A4FA-4A66-A88D-ECD8F50F70EF}\_Setup.dll

          Filesize

          30KB

          MD5

          513c2baf2844f2f721732020fa88c1bb

          SHA1

          e634fcf8f0616dd66e7bc3705098bae5a7c5faa8

          SHA256

          eb36e2c046f4ada6e90710dade9fbab6d5ed9ce01dc8f403096ecfd0d99bd986

          SHA512

          e74ab675585331d17b10fded8508828d519d6a466d251930156e2a69a885e09330276d313405b9010aafd9107dfd483b2cb13f473067d84c20bb61bf3eb16621