Analysis

  • max time kernel
    166s
  • max time network
    193s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 13:21

General

  • Target

    b0e096b96a050f8c4cd06d3732aab259f4b940cf1a9fee3417a81a13d5dc8224.exe

  • Size

    235KB

  • MD5

    5f804022cb541be1c63d8b36e588bde5

  • SHA1

    4e85ce974227e3d22978ccd2a30113255a548859

  • SHA256

    b0e096b96a050f8c4cd06d3732aab259f4b940cf1a9fee3417a81a13d5dc8224

  • SHA512

    88ec6ca6f9a8741aff925d6ee62e25d13236ec94073f4b56b3e2fdc25a1c77d0de5457ef52fc569ec5276d0dc98bd1276ec12491db550daa33f26daee5dbbc0b

  • SSDEEP

    6144:XRAlxNuLhFFQnsTgLkDHmfXwXsCaIMdXwqRuw8Ttcnyzv5+AeDk:XamFQnIgamfylaI0wqRu7Fwr

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b0e096b96a050f8c4cd06d3732aab259f4b940cf1a9fee3417a81a13d5dc8224.exe
    "C:\Users\Admin\AppData\Local\Temp\b0e096b96a050f8c4cd06d3732aab259f4b940cf1a9fee3417a81a13d5dc8224.exe"
    1⤵
    • Loads dropped DLL
    PID:4408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\89158b1e-afe0-47df-8f2e-3d5af87e1f9c\AgileDotNetRT64.dll

    Filesize

    129KB

    MD5

    2673df716b8f932150da1739d2443b61

    SHA1

    72ede3a78fcd4467bef0e4520945137a47b07cb6

    SHA256

    29145f4a929660d92dfcf99dd074e2b8ef24371c75f62a1021b59aa617dce946

    SHA512

    72b5a1ba8d4478ad871e700d4e414331147ee95b4a95f08bb7f597dafff23c332f341882304be1e1efe607520dbe5ed920fedaac339a5a6326b3fb67a9fd5bf1

  • memory/4408-132-0x000000001BAA0000-0x000000001C4D6000-memory.dmp

    Filesize

    10.2MB

  • memory/4408-134-0x00007FF8307E0000-0x00007FF830963000-memory.dmp

    Filesize

    1.5MB

  • memory/4408-135-0x00007FF83FC50000-0x00007FF83FC74000-memory.dmp

    Filesize

    144KB

  • memory/4408-136-0x00007FF83FC50000-0x00007FF83FC74000-memory.dmp

    Filesize

    144KB