Analysis

  • max time kernel
    3s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 07:04

General

  • Target

    ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64.exe

  • Size

    316KB

  • MD5

    c02a6ee40fde760cf218a7b10a5c3db0

  • SHA1

    3f026f04c828dcf01d667942a2b653ead7df3fe3

  • SHA256

    ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64

  • SHA512

    d63e8531218dc4070b321781a7dfa5be1e5445dd9ba1646f9a9eb96d14436846eb6d2a2025b63e2bbabca67bf396cef96e86ba1eaf26c6ce21a04d74c45d6fae

  • SSDEEP

    6144:HrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMC:Hr2kuveY3ZF31N4XxZjC

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64.exe
    "C:\Users\Admin\AppData\Local\Temp\ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64.exe"
    1⤵
    • Loads dropped DLL
    PID:904

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\Tsu2C54ECAA.dll

          Filesize

          8KB

          MD5

          25afdc6bbcc7cc25ddb8d74af426c2cd

          SHA1

          236fa6702fe8c774a32d80d9aca06bcc2e8c22ba

          SHA256

          db743e41dad4fa99bc7a578df225e9974e7e05b61ef4fda257057b24d717b50e

          SHA512

          2fd3bdeb28793931606ddd3c0434a663a49ba1fa246ffcbea9fe84a03324d557fd0b7d950926b70fdcfa1cf9beca8a3217a988e864f29663503dc53087faf739

        • \Users\Admin\AppData\Local\Temp\{382FC384-B0E6-4DAA-AF41-F8C4E3CCE172}\Custom.dll

          Filesize

          14KB

          MD5

          dd367a37ffb4f86257f723a1fed9c46e

          SHA1

          0972ba4428679d75081d78f95fbd7fc2a489b1b0

          SHA256

          a636a814dfa3d05cff3f2c9222de5fec795a46cc486faef77ba4e15aad843832

          SHA512

          27e7c9cb4eab5069278b31e06fe3d2d72ab229b1c4e394d543afbb9fb5055f06f479eff205cb4321d583f4c760c793cad1ce6a6866f0a412ffabf0b07108cb13

        • \Users\Admin\AppData\Local\Temp\{382FC384-B0E6-4DAA-AF41-F8C4E3CCE172}\_Setup.dll

          Filesize

          28KB

          MD5

          7d0fa3f09c8729b14e6b0373bcf5f711

          SHA1

          f9294373ca68857921aa44f28b31ee26bfd47722

          SHA256

          93588432e71588c1905f920e34a8f72e06f241ee9f9479e794869986e25263b5

          SHA512

          66495894a3d5589c4a53a49851c6beea2c421278a5bbfb87f37cc4f80bef6e362c922d62da944466350e2aaf0909662d2daed7f542dfedfab4b799a137e7be5e

        • memory/904-55-0x0000000075E11000-0x0000000075E13000-memory.dmp

          Filesize

          8KB