Analysis

  • max time kernel
    1s
  • max time network
    98s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 07:54

General

  • Target

    c31c9d9b851084915e638e27a64eaaca3c9e097ca0ceabb421999fa24215b713.exe

  • Size

    326KB

  • MD5

    49066d78acf31c9c7f43909ef1378048

  • SHA1

    93fcc76ff7fe937d3c74acc589ddd1bf760e6ff8

  • SHA256

    c31c9d9b851084915e638e27a64eaaca3c9e097ca0ceabb421999fa24215b713

  • SHA512

    e71167a644ada999cc55ee34871e37998bb474d2d94055a478ac84b219111f9da88272ba703e9cc856f116b75c4bfc7ff5808feefc2f3dddbfaa424fa99c04dd

  • SSDEEP

    6144:qr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgA:qr4gu6/eIo4nULZKMRwxuPfk64

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c31c9d9b851084915e638e27a64eaaca3c9e097ca0ceabb421999fa24215b713.exe
    "C:\Users\Admin\AppData\Local\Temp\c31c9d9b851084915e638e27a64eaaca3c9e097ca0ceabb421999fa24215b713.exe"
    1⤵
    • Loads dropped DLL
    PID:1980

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\Tsu671BEC23.dll

          Filesize

          32KB

          MD5

          7e1f11c0b37d14d5327217b594ac90df

          SHA1

          9bd055dc9bdf09dea731710d373a741950be9c50

          SHA256

          a6d607b9ff5190b7bc806fb59bc975b50dfd2e4ad7615562b83b51d40ae8791b

          SHA512

          eb2d037249b208460ba2fd9cbd24f2f2eaddb417c719ebf5a511f7f0334c52220406f2647634c26b73b2f6a753374cb51429a218c951271cfd6a5e4f9f12eea8

        • \Users\Admin\AppData\Local\Temp\{F2078E98-D964-4D53-AFB8-914629E4AC6E}\Custom.dll

          Filesize

          44KB

          MD5

          fceb1e1273fd0a2d78409ec4c81f7554

          SHA1

          681d614e3f07d0b62110dfb2425effc8592f61ed

          SHA256

          ee30e8a6000359c5348178a370b26e26b96b1ad7e77d7721a910a863c6828492

          SHA512

          544d3516de423444571a97dc2f75d773db37351bdc365e2fdd1c8aa5e8d3b3c2a28c143cab5a983d36970bb25093a9fa6425ba364145caca48b68cf2edb59917

        • \Users\Admin\AppData\Local\Temp\{F2078E98-D964-4D53-AFB8-914629E4AC6E}\_Setup.dll

          Filesize

          47KB

          MD5

          1a2a2c1da0d024e9da7081620f2fa468

          SHA1

          c3d42b4be68031c684c77dfcc8ff4eef963df546

          SHA256

          c918aa34570b42ed2140ef33e9409e1f914a84e4f5c8c8bcd89b4a729105b4ac

          SHA512

          5254dddd7bdb206cce449183df2ab8dd6f36247d72d90eeb71a7dee19d1383ecbe4a567ff589bb97e3bcc92988bb05993ff046fef56852e39df45f3d766ba987

        • memory/1980-55-0x0000000075831000-0x0000000075833000-memory.dmp

          Filesize

          8KB