Analysis

  • max time kernel
    13s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 07:48

General

  • Target

    f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00.exe

  • Size

    316KB

  • MD5

    79064aea7e6d43b9102e0b252f91724f

  • SHA1

    d7c9008e9258960547e2375493cd00755d4a4edf

  • SHA256

    f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00

  • SHA512

    610b3c9f9c76f8e7cf340df97834b9b341f2932e9793065d94d4b761f51c55464912d9c5c65f91381a9786f507fe07a68252b3aebfede3ef6f4e49ea757891df

  • SSDEEP

    6144:Zr9bUzkuvcBYC47l2xA0CLzrfn5Agvirxi/NRFBDArI:Zr+kuveY3hdLzrfn5A1KtBX

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00.exe
    "C:\Users\Admin\AppData\Local\Temp\f53e2529df2466997b82a218988eebb5b4da6ca5e7e592d8423f452d8e3cbb00.exe"
    1⤵
    • Loads dropped DLL
    PID:1776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu75081185.dll

    Filesize

    38KB

    MD5

    a88a36078ac78ab96d12c4a361700adb

    SHA1

    1ad6a3c5061b9b921f9a5bee0ac4994aa915671c

    SHA256

    f0c8ea57548d7ce7e6abaaaf897c268a3391f3b9c7c269c6a166256db51298e0

    SHA512

    491115803db29036998c2718ad56f5d23730759414614c126119ccce3836d4df852eca17a3d63ffcd9bc38c4d4246127ed05811449ebd9657311b0827d0e142a

  • \Users\Admin\AppData\Local\Temp\{FD7ABE90-8B4A-4499-A672-C36826999C66}\Custom.dll

    Filesize

    14KB

    MD5

    d5d90483b885806b92161871beaeeb05

    SHA1

    1aee1d4771c4e7cc73cae85a738ced38c585b5a8

    SHA256

    ce32ed932478812799b0bcb26f1d9543d8476b25241709483356131a9adf244e

    SHA512

    e94297ea34b8383d895e3c4291e9eaa62a1890eb426326bd70c7130707381a0288197783611ca8a495e01a0589f041b99cf3ee354d748c54d90f5420c3070228

  • \Users\Admin\AppData\Local\Temp\{FD7ABE90-8B4A-4499-A672-C36826999C66}\_Setup.dll

    Filesize

    23KB

    MD5

    8d1570f08729ed7525f748fd0b971320

    SHA1

    8d5eb1be8d1182399e4d9538783778fcf5281985

    SHA256

    1e167460545476d2d0c9a2aee970196bb8eda759141a82e35e9aaaae6acc2f8a

    SHA512

    0288b4238ac5b3fd5507e319e2fbfcfe6745d43aaf741e65fa1e0524e18f0769a62a615f25be4de36a0d6648d4499eef71f93a8b1d6935c69286e6fce11602df

  • memory/1776-55-0x0000000074C91000-0x0000000074C93000-memory.dmp

    Filesize

    8KB