Analysis

  • max time kernel
    3s
  • max time network
    2s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 05:53

General

  • Target

    be59cff64fbc5c5d367893eeb6034fc0927013d547d4a3ea5fe1afa2ea118c70.exe

  • Size

    313KB

  • MD5

    c133736dc2f3d9fae30ab311455650af

  • SHA1

    9bea806f14dc2f0cda426aa1c1587d5fd8199ee1

  • SHA256

    be59cff64fbc5c5d367893eeb6034fc0927013d547d4a3ea5fe1afa2ea118c70

  • SHA512

    f9b7e157633c3208a4be87b81f3385387610bf0039293be2dcdccd1ade0ca56f176cd35b3a97addd2b2b6f9de0caab3e06b27334d358ea4e7fb5706c7a8a8172

  • SSDEEP

    6144:KrkP9uEo2S1YnQmCX492DkwNP3qpYFpdteedaMtBxOWUevASojincBS8:KrkFu6/eIo4mdt2M/lUevAzicL

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\be59cff64fbc5c5d367893eeb6034fc0927013d547d4a3ea5fe1afa2ea118c70.exe
    "C:\Users\Admin\AppData\Local\Temp\be59cff64fbc5c5d367893eeb6034fc0927013d547d4a3ea5fe1afa2ea118c70.exe"
    1⤵
    • Loads dropped DLL
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu23541D80.dll

    Filesize

    6KB

    MD5

    6a8ed9778cd67d62a8f1e85038c28d24

    SHA1

    eb4675e19e23b841f080c48fd4e268db9a9d1a9b

    SHA256

    01821aee1d49775ffe88066c7a567b284df1b05cc8d05a072d329eb0eac1121c

    SHA512

    4d40a6f2012353a158fe987eb94ee6472b5a851d6d50c3cda5afdeedad06ffc2e7de87b61c8c20cc519400ebd52ff91f843b96b2636d0836d47ec068ecb3ea24

  • C:\Users\Admin\AppData\Local\Temp\{F5C362C4-2EBD-41BB-A350-669F2E204032}\Custom.dll

    Filesize

    10KB

    MD5

    285bf531d98da404dbf0cf1280843cea

    SHA1

    baf7d21034b301f873e9f015285c0e9465432cf3

    SHA256

    56f6336ed8ec4854a25a741d2adbccc774fc8450d09eeda169a8127ea0744ff5

    SHA512

    c4bdd847e2a566e867164750ed009e1cb0b8c317a83227ce206d72aec7a50a0d516b067baaae7b2839487f596ef01f646b50eadc9464c432d96cdb24a9b5b2cb

  • C:\Users\Admin\AppData\Local\Temp\{F5C362C4-2EBD-41BB-A350-669F2E204032}\_Setup.dll

    Filesize

    25KB

    MD5

    21720bbf51de7f1d2af6dc3af57ddf44

    SHA1

    4236239688ad14380f1e1d861471d2c85c281d7e

    SHA256

    94ac9bf533f5a28180a43c0124710f5bc33f54681fe411c49c55db79ac3ce71b

    SHA512

    4f9e52057a7b7383cef905456781e716ad1701dbb755a2513988987e8af23c9f237b3ac2f34c1231160333b9a9695c97bb0f002f3aa936b0ee7de30c04b6695f