Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/11/2022, 08:16

General

  • Target

    ff33268502a0c95ef13906e1230ef412ad77676a54aecb439c8c4393972e28c4.exe

  • Size

    120KB

  • MD5

    30a86a18abc2fab5c7d583bcfb267a5c

  • SHA1

    db862d1b3378844e1629d302007fb5c6748b2a22

  • SHA256

    ff33268502a0c95ef13906e1230ef412ad77676a54aecb439c8c4393972e28c4

  • SHA512

    e0b54539f883afadcf5168a7d0fbbc139a4052cc6179bb90d3f6126eb65c6b0ac47b938b1182bdcc9ba7018f5629e6f2daf05d25cb5a6b74185d8aca1d8b1c84

  • SSDEEP

    1536:BTuP+pQHLD70TnKbFDUIYkK4cEui1gNNx0eW6QPB/4ZW1ck8zHhTduu+qjIk9WkN:W+pQHT0Tn0hYZ4z1sxtbjIUWnoRz6E

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Windows directory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ff33268502a0c95ef13906e1230ef412ad77676a54aecb439c8c4393972e28c4.exe
    "C:\Users\Admin\AppData\Local\Temp\ff33268502a0c95ef13906e1230ef412ad77676a54aecb439c8c4393972e28c4.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    PID:4612

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Wplugin.dll

          Filesize

          108KB

          MD5

          8847a8302dacc1d6fca61f125c8fe8e0

          SHA1

          f399142bbf03660bee1df555ebbf3acc8f658cf0

          SHA256

          9c2726defa122089f8251fa104f76d66830f448774ab9bd634adbb6e492e3943

          SHA512

          2b028bb4139c352b80db1509d1a3f479a8ef7e9b3b73ddbf62e2d83d4e59adf4a0bd6b9d68409bc0b6fafb7a5f56844fbfed6d00b824a6b370689801ce1c837f