Analysis

  • max time kernel
    13s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 07:48

General

  • Target

    f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00.exe

  • Size

    316KB

  • MD5

    79064aea7e6d43b9102e0b252f91724f

  • SHA1

    d7c9008e9258960547e2375493cd00755d4a4edf

  • SHA256

    f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00

  • SHA512

    610b3c9f9c76f8e7cf340df97834b9b341f2932e9793065d94d4b761f51c55464912d9c5c65f91381a9786f507fe07a68252b3aebfede3ef6f4e49ea757891df

  • SSDEEP

    6144:Zr9bUzkuvcBYC47l2xA0CLzrfn5Agvirxi/NRFBDArI:Zr+kuveY3hdLzrfn5A1KtBX

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00.exe
    "C:\Users\Admin\AppData\Local\Temp\f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00.exe"
    1⤵
    • Loads dropped DLL
    PID:1776

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\Tsu75081185.dll

          Filesize

          38KB

          MD5

          a88a36078ac78ab96d12c4a361700adb

          SHA1

          1ad6a3c5061b9b921f9a5bee0ac4994aa915671c

          SHA256

          f0c8ea57548d7ce7e6abaaaf897c268a3391f3b9c7c269c6a166256db51298e0

          SHA512

          491115803db29036998c2718ad56f5d23730759414614c126119ccce3836d4df852eca17a3d63ffcd9bc38c4d4246127ed05811449ebd9657311b0827d0e142a

        • \Users\Admin\AppData\Local\Temp\{FD7ABE90-8B4A-4499-A672-C36826999C66}\Custom.dll

          Filesize

          14KB

          MD5

          d5d90483b885806b92161871beaeeb05

          SHA1

          1aee1d4771c4e7cc73cae85a738ced38c585b5a8

          SHA256

          ce32ed932478812799b0bcb26f1d9543d8476b25241709483356131a9adf244e

          SHA512

          e94297ea34b8383d895e3c4291e9eaa62a1890eb426326bd70c7130707381a0288197783611ca8a495e01a0589f041b99cf3ee354d748c54d90f5420c3070228

        • \Users\Admin\AppData\Local\Temp\{FD7ABE90-8B4A-4499-A672-C36826999C66}\_Setup.dll

          Filesize

          23KB

          MD5

          8d1570f08729ed7525f748fd0b971320

          SHA1

          8d5eb1be8d1182399e4d9538783778fcf5281985

          SHA256

          1e167460545476d2d0c9a2aee970196bb8eda759141a82e35e9aaaae6acc2f8a

          SHA512

          0288b4238ac5b3fd5507e319e2fbfcfe6745d43aaf741e65fa1e0524e18f0769a62a615f25be4de36a0d6648d4499eef71f93a8b1d6935c69286e6fce11602df

        • memory/1776-55-0x0000000074C91000-0x0000000074C93000-memory.dmp

          Filesize

          8KB