Overview

overview

7

Static

static

eec8e8b927...5f.exe

windows7-x64

7

eec8e8b927...5f.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    2s
  • max time network
    116s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/10/2022, 08:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eec8e8b927b6c90b27a712f56e9f6bd047c9076d426257cef0ed5959faf3f45f.exe

  • Size

    327KB

  • MD5

    f3e7b7d6b8c1f6bcb7542e7173ebd496

  • SHA1

    48a4fd82cfcf8e15dc647a9382a9768312af19a3

  • SHA256

    eec8e8b927b6c90b27a712f56e9f6bd047c9076d426257cef0ed5959faf3f45f

  • SHA512

    b7c0ee8b502b7b7680a6455090c17a6fe8bc80e65593e771536b9f0c60513157e0d50395037af093c48e5f3470c1757dfdac1c46a164f0f0e14d5cadf94cd78a

  • SSDEEP

    6144:5r469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fe:5r4iu6/eIo4Rsw33AtsmQD

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eec8e8b927b6c90b27a712f56e9f6bd047c9076d426257cef0ed5959faf3f45f.exe
    "C:\Users\Admin\AppData\Local\Temp\eec8e8b927b6c90b27a712f56e9f6bd047c9076d426257cef0ed5959faf3f45f.exe"
    1⤵
    • Loads dropped DLL
    PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu2F39F000.dll
    Filesize

    50KB

    MD5

    5f62feb93f11f754be7d38e3e37d6e91

    SHA1

    7747b49a13c7be071297653e3d99f23f6c4f8254

    SHA256

    c308a8f498e5d6b3afb22462ccfd761967c7e754d8af2acc1a7f254ff5b6d1b3

    SHA512

    f7997eb9b5b08c14203579c4b85db0db3df9fe7ab61a2d23e8b12a0ce18b5fe628017c5c9b8e93c7d4ab85c5bff066bd4ddba0f39ac8aa6e32f5730a78c5c0d2

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{0E4EE618-A6CF-47EA-A501-EEEDD5ADC4EE}\Custom.dll
    Filesize

    58KB

    MD5

    a15d4364baacfa8171d855cb5e1c0480

    SHA1

    9dfe22e89a781863be1c6d187b96b22514467203

    SHA256

    5a8c75647d4a1084436a10b7561778f3586b65af15c4ac594a0cf665423dab4d

    SHA512

    d903e098deb459510f39ce66836f3ce7db9cfaae8330d3de59a6ce845854c95bc6e00e5ddfa2d209bfc8085e505d5c36360966a691a5f08fc903616c3ce8d778

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{0E4EE618-A6CF-47EA-A501-EEEDD5ADC4EE}\_Setup.dll
    Filesize

    68KB

    MD5

    0a761813dd1dbf790a8c5991c93c07c7

    SHA1

    3b2df67b1c7feca3835087d6c037192ec9a0b0e0

    SHA256

    362f502df5f020643f594afb34d16ed6ff34e9e823d284cd711c3a54ec035395

    SHA512

    274c1c72ae1c6c5b1a495a68b6e6e3923df87d7d9727bf5ea5c220ba969f189fe90d950c60c2c28cd0079d54054a786e88faee1ea7e36efdb42f1b37c8ca21d6

    Download Submit

  • memory/1636-55-0x00000000761F1000-0x00000000761F3000-memory.dmp

    Filesize

    8KB

    Download