Analysis

  • max time kernel
    2s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 07:52

General

  • Target

    36338edf8bf8926a90eeef898b1faf65e9832ef60931fe461a2150c4bf8d7d55.exe

  • Size

    313KB

  • MD5

    aa1ba5f3c1cce32b5bfedc9a3704bb1d

  • SHA1

    9661c2a83d4059effd17632fffa566edb39fdd1e

  • SHA256

    36338edf8bf8926a90eeef898b1faf65e9832ef60931fe461a2150c4bf8d7d55

  • SHA512

    2ced33c18adaecadd2ae62aeab6367decf96b556dd520885d18243f38ac44afda1132055eb3b2be5a26f9ca184bafe5712e8d8ec78b7fe3a7d9956d2bcd33bd0

  • SSDEEP

    6144:yrkP9uEo2S1YnQmCX492DkwNP3qpYFpdteedaMtBxOWUevASojincBSg:yrkFu6/eIo4mdt2M/lUevAzicj

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\36338edf8bf8926a90eeef898b1faf65e9832ef60931fe461a2150c4bf8d7d55.exe
    "C:\Users\Admin\AppData\Local\Temp\36338edf8bf8926a90eeef898b1faf65e9832ef60931fe461a2150c4bf8d7d55.exe"
    1⤵
    • Loads dropped DLL
    PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\TsuC419918E.dll

    Filesize

    17KB

    MD5

    d5a2f4cb6fd1f828832123943e2117b1

    SHA1

    f5d5d2f34954234e76e513a177cc38b3e6c39385

    SHA256

    d7808c1752cffbda979a46320bbaaf9143bd9c636db4e45e017d8152c41741c1

    SHA512

    140ce07700088a3f3e200ecf496dc6d632f55a614f12e8e4da2b85938661d06f3a38e952903239d29994e471cc7bde0dd08babe1229cb1657b8be8ddc253bb33

  • \Users\Admin\AppData\Local\Temp\{D6CE6BC3-529B-4322-A1C9-1AB90D2D4935}\Custom.dll

    Filesize

    15KB

    MD5

    2ee2ce6aa32493b35939ea6dd5aa5b8d

    SHA1

    8382d50106f141daf553b9fc62604726063307c3

    SHA256

    c1826b96b180d0a6b7411e24be4a14c447baf6f5d4c28dc842206e1b3bea2105

    SHA512

    3a2a9b6e81f4c753a45e9696f7a04079796063ca97d993406ce99261768d8f239f3113af683b04ea12771ad72b526c8030c3a3225c47bc339845ca3f51c4aaa3

  • \Users\Admin\AppData\Local\Temp\{D6CE6BC3-529B-4322-A1C9-1AB90D2D4935}\_Setup.dll

    Filesize

    18KB

    MD5

    edad73eeda1dd8cee0f5f8a2d705d239

    SHA1

    c4ea40127ed8bae4216057344489f9f519589768

    SHA256

    2390def461c9ce464c8316a76d3a86cc9fd7ac687e5332862940f2e4082a92cb

    SHA512

    cd850a4721ab03b218b1e0c427414bf0ff6210f551dc4646d0f52d7b6fb54802d800d24aaa9ebd3971b51fe20e3fab6ae425a667464831fdd22ab80e558f7e3b

  • memory/1900-55-0x0000000075A81000-0x0000000075A83000-memory.dmp

    Filesize

    8KB