Analysis

  • max time kernel
    22s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 07:43

General

  • Target

    ab6307fab9f461d6087b49eda2fbfacfb08e674538bde193519e089d4fc8dc82.exe

  • Size

    313KB

  • MD5

    c5698002a841fa3985d0e8a210050091

  • SHA1

    25de38118a480282c2d9d0e347c4c889380b8d61

  • SHA256

    ab6307fab9f461d6087b49eda2fbfacfb08e674538bde193519e089d4fc8dc82

  • SHA512

    f540a18f47cab2d2a18a50f880e571bad1ddc3f5e07fac2afc43560f2fbcb62bbc7cac3f4f7e1da4d0f93db3851a45f155cb340487d9bfe6ed815173a99a96bf

  • SSDEEP

    6144:5rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYx:5rk4u6/eIo4nlu7trxFtApfgMyrpjYx

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ab6307fab9f461d6087b49eda2fbfacfb08e674538bde193519e089d4fc8dc82.exe
    "C:\Users\Admin\AppData\Local\Temp\ab6307fab9f461d6087b49eda2fbfacfb08e674538bde193519e089d4fc8dc82.exe"
    1⤵
    • Loads dropped DLL
    PID:1488

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\Tsu2DA674C2.dll

          Filesize

          7KB

          MD5

          9afa1074f35659aad4edaa66126f4be4

          SHA1

          bc9e2741994f6027e11c87295222cb08694f2be2

          SHA256

          61d6a90e9aec5e1b612d42998c2e61e79b008fcb040d25cba23ded0a1873125d

          SHA512

          0e6a561f59fed7644531639496560db5909509b58afb73c760325324446677df19e171c9a5b96791a780cf82fad32b4b5a7ee0abf7670be9d6fd1aa5ddece4cf

        • \Users\Admin\AppData\Local\Temp\{7A4C804A-68CA-4607-A4EC-20E8A1AFA2BC}\Custom.dll

          Filesize

          24KB

          MD5

          126e9816e16c43a6622ebd782b99d77b

          SHA1

          89b9b90ada1eb08f4c85483aa54344584b77530a

          SHA256

          c72ccb71587ef908b827ba7cebc32ade4aec189272af53cc41b8e3456c07e8bc

          SHA512

          0d8afbc05ca8928ec33954ebbdc4ce951707ea209b3ec9805d3f6a5773c488d97f5c9858d0a13049e77d08a76de3181e628aa7896f8e24709a21b34713e3943c

        • \Users\Admin\AppData\Local\Temp\{7A4C804A-68CA-4607-A4EC-20E8A1AFA2BC}\_Setup.dll

          Filesize

          7KB

          MD5

          534d23221f93509e6e8f404cdf55c1cb

          SHA1

          55a2df27bd1a875a762ce7de7115d4ecc1927926

          SHA256

          c513634f7888abe0b3b173662f48d0415cfcf8410dc801abe29ec5e45689d434

          SHA512

          c155b111101c24d8a3b297978b02d0bf6e3e8d031fbb6721bde3c7cb9f0bc9a2b17f67b50b9e244ce7e3e220e26cbb56ec0f653fee202faadab0e3ac5d8c69ee

        • memory/1488-55-0x0000000074AB1000-0x0000000074AB3000-memory.dmp

          Filesize

          8KB