Analysis

  • max time kernel
    6s
  • max time network
    11s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 07:04

General

  • Target

    ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64.exe

  • Size

    316KB

  • MD5

    c02a6ee40fde760cf218a7b10a5c3db0

  • SHA1

    3f026f04c828dcf01d667942a2b653ead7df3fe3

  • SHA256

    ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64

  • SHA512

    d63e8531218dc4070b321781a7dfa5be1e5445dd9ba1646f9a9eb96d14436846eb6d2a2025b63e2bbabca67bf396cef96e86ba1eaf26c6ce21a04d74c45d6fae

  • SSDEEP

    6144:HrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMC:Hr2kuveY3ZF31N4XxZjC

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64.exe
    "C:\Users\Admin\AppData\Local\Temp\ec501acb550343b31f1d7b302f221195610b5bf412f77ae526de9de626d5fc64.exe"
    1⤵
    • Loads dropped DLL
    PID:2580

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu236AA97D.dll

          Filesize

          35KB

          MD5

          472ea8b80417265cd2e5f3cb87193f04

          SHA1

          21c921d7a56450aa356103e1366da6f5051814fd

          SHA256

          1e5a1996410ac97385fd0e97355d985a445e59eaa9f726efa044a0abba3bf898

          SHA512

          997191cbefd4c205172b2f53595889a838028ea3917cf09dd510bdc79e78b97b71ebf7d0c78334f38963abb503d65617ccb7019223f09fc98a47002d6b9a32af

        • C:\Users\Admin\AppData\Local\Temp\{7C50BE9B-5D71-4ECD-AC26-1553A7B39C6D}\Custom.dll

          Filesize

          91KB

          MD5

          74187f0d3091d876c86cd59e6d274723

          SHA1

          da269d0d9db1815e599dcd4342eb7664d70c3eb6

          SHA256

          d1e0c357c47d79cc8ba115e7553ffc0825aacc7ef4708fc9f5e71f3fd4d01350

          SHA512

          2ffab239d2efa6423fd08ca1f9b0b76bc6cd65902fd7ca56955b6737a92d4559e21c22c79895f3b02a57a48e6dd75057ff1d76e2e149d28cf808d24465d12e38

        • C:\Users\Admin\AppData\Local\Temp\{7C50BE9B-5D71-4ECD-AC26-1553A7B39C6D}\_Setup.dll

          Filesize

          9KB

          MD5

          1330b87f14151a805c5666502c0ae4e5

          SHA1

          04d4ec1ce4db8be6c69e555911b45f8c321eac97

          SHA256

          abd55819c29320921c30be90d70e59b587501db89725b85d886127c7d1b1f0da

          SHA512

          55bcbb7e075ecf22e410f97775e5b3bdbfc1238200758e7aec826cf012132d082a3937b86dbb7a848fa530179acabd3f9c5028adbbd0ee4dc91b70b06640fc6c