Analysis

  • max time kernel
    2s
  • max time network
    7s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 08:48

General

  • Target

    6016de5fbba38d2759cb40ea82b778ce43d2289515a3fab7fc94a5a26a6de095.exe

  • Size

    316KB

  • MD5

    9fe9a217f5a2f3aa98ab011d6271c462

  • SHA1

    919df401d5f4934c9da5c8deeced877288854c95

  • SHA256

    6016de5fbba38d2759cb40ea82b778ce43d2289515a3fab7fc94a5a26a6de095

  • SHA512

    07610b54bf05cd11c783b856377152938b007103c1037ac1cffaf85133f4262eeb4d3547c7ad056355d9017eb6829e3525033a01b59540c9d7dae7b914e9c6d7

  • SSDEEP

    6144:BrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVU:BrkkuveY3zhlV6tmDxzwVU

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6016de5fbba38d2759cb40ea82b778ce43d2289515a3fab7fc94a5a26a6de095.exe
    "C:\Users\Admin\AppData\Local\Temp\6016de5fbba38d2759cb40ea82b778ce43d2289515a3fab7fc94a5a26a6de095.exe"
    1⤵
    • Loads dropped DLL
    PID:4688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuD4144B28.dll

    Filesize

    21KB

    MD5

    74a36b295445e39c66ecd5267c957ad2

    SHA1

    ca9910540bf9bf5e63c1894eb20e5b6613b2b91a

    SHA256

    673b0e4ef63c37236e7e4025fa298eab905a270d95c15658557942a7a78fef12

    SHA512

    f652bd1d9f7345d797007db2337ca867d40524126d25fe91f138c1fca5c097996c73734567f5206506b22bfc8984957832aaa7eb86833bd0be279539a369afc1

  • C:\Users\Admin\AppData\Local\Temp\{32B76A08-3417-4D8D-AF66-7C35E95448FE}\Custom.dll

    Filesize

    13KB

    MD5

    425937c88e0900d7da465f8eccd26bef

    SHA1

    abe02f5c5724aa0b511c0b159bd8a75520989ad2

    SHA256

    58b8b851693a158f9ae19e8e7cbd56e5972f62e1a4f5b2dbcba9a00c1d7c14eb

    SHA512

    5471e8c842a8d843d47ca3c0afe6af2a858cda1bb95b067ca4a1b74f48f83e3d428176ed9a8370f69e431e843aba97ccf1ca450164b36ac39453f53207b93f8f

  • C:\Users\Admin\AppData\Local\Temp\{32B76A08-3417-4D8D-AF66-7C35E95448FE}\_Setup.dll

    Filesize

    24KB

    MD5

    ac41db735b80f91d9556b9a2b2cbbbd2

    SHA1

    42ad40ba1340414524faf62bf4246f304ba65f7d

    SHA256

    bc9000dcffd3bbbf921eefb1211e38d0a60669e6901578d75ed13c65dfdcd041

    SHA512

    f6c4dd5d7a6f0279c6bfea32839e1b33f278b63d4eec0f1d2487e2bf3d0b2b5ca2e503bff904a2f4b963564258acc6cffbe7d75a52044d52553bcb973ab816a4