Analysis

  • max time kernel
    2s
  • max time network
    78s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 06:45

General

  • Target

    b06f573b1fb69e578dbc98a0e4e5b7ffc3b6f87fc648186bfade2b4a44190263.exe

  • Size

    327KB

  • MD5

    60b95b830fd9c74f849cfbead506e771

  • SHA1

    105934a212d1fd6f18597696473cf2fe2ef1b8ef

  • SHA256

    b06f573b1fb69e578dbc98a0e4e5b7ffc3b6f87fc648186bfade2b4a44190263

  • SHA512

    a850d15e0bac1a654bb8d61b21ddd6857452ec9a159b895134361cc26196d2e5dea51a037c349d9568ac22b6a68812ea8408e79a08ebea88c980c7dc7eea8be3

  • SSDEEP

    6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fm:Jr4iu6/eIo4Rsw33AtsmQb

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b06f573b1fb69e578dbc98a0e4e5b7ffc3b6f87fc648186bfade2b4a44190263.exe
    "C:\Users\Admin\AppData\Local\Temp\b06f573b1fb69e578dbc98a0e4e5b7ffc3b6f87fc648186bfade2b4a44190263.exe"
    1⤵
    • Loads dropped DLL
    PID:1660

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\TsuC7B4CD01.dll

          Filesize

          20KB

          MD5

          7df365d1e2f1b88077f299fe5420fe84

          SHA1

          7c6bd36d997491021968d9c16ffebe8a5c24f86d

          SHA256

          2b96e87b2067ed27b4ff5e148604d0bf8bb418cfd97e38ff0c8e8002f0af7cd2

          SHA512

          6a778dcdb2c9abb6eeac07b1893861de256a9c70c38006cb46b4ba44a6067a1a60bc7626bebb43d7271e54aa8674aa3a24e8163c0d6fc00886342fa9ef041146

        • \Users\Admin\AppData\Local\Temp\{F9A4B997-E3FB-4ABB-A850-ABD922479B61}\Custom.dll

          Filesize

          17KB

          MD5

          60bef6960013cc13e2784ce8282aebf5

          SHA1

          6bcc1b3990e3807ffa5ba0594f2f51cdd9e7dc29

          SHA256

          91b562bcc8a9189664fe0727b497f61e55334ae0858eb14aeb28184a6fc44101

          SHA512

          61daad5c8c6ad435c43ea818963e6d876b128cf6864bc227e1971d85b2c090a78550e8f715d7a764614196de2fc01e5aa58b5776d6eeff2e27f6fb70b34fc88f

        • \Users\Admin\AppData\Local\Temp\{F9A4B997-E3FB-4ABB-A850-ABD922479B61}\_Setup.dll

          Filesize

          53KB

          MD5

          6726a85e8d479b65d596e29a98cc0cc4

          SHA1

          dbab845faab4a39302abd4eb6097eac406edc262

          SHA256

          6f9ceaba026d219eb5af8a5698a2f4da1c589c6525440bece63bf12c98b78b4b

          SHA512

          41264b11616b3db6f0d820e522c666bb0c4722868c36b77503560f1a1a9e0049d6886093c452797c117eacf608034ab6a2df2c85042af392611cbceb05c29f0e

        • memory/1660-55-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

          Filesize

          8KB