Analysis
-
max time kernel
47s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 15:38
Static task
static1
Behavioral task
behavioral1
Sample
5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exe
Resource
win10v2004-20221111-en
General
-
Target
5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exe
-
Size
173KB
-
MD5
cf042f3ca1b72dee7b0aab217735238e
-
SHA1
fbb2740c32896fc5cc3d90d21327403d5b3dc336
-
SHA256
5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299
-
SHA512
0ae7ecf1bc0a19396c1573460093a956c8c0c8fd039d1035367fb871201f89da00154be2e7c525527d79103cd489464c01f325d725a95b04864cc1f44588a611
-
SSDEEP
3072:LFYZzOR43lGfMuTsPO7dXcYjwyhuuWQvKgTon861ocAF+kVF0Vv39:BYZOI43fO8mOJF6v
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
Processes:
monilor.exepid process 628 monilor.exe -
Drops file in System32 directory 3 IoCs
Processes:
5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exemonilor.exedescription ioc process File opened for modification C:\Windows\SysWOW64\monilor.exe 5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\sLT.exf monilor.exe File created C:\Windows\SysWOW64\monilor.exe 5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exe"C:\Users\Admin\AppData\Local\Temp\5734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299.exe"1⤵
- Drops file in System32 directory
PID:1720
-
C:\Windows\SysWOW64\monilor.exeC:\Windows\SysWOW64\monilor.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:628
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
173KB
MD5cf042f3ca1b72dee7b0aab217735238e
SHA1fbb2740c32896fc5cc3d90d21327403d5b3dc336
SHA2565734f69b53e3beebf49cb9544e3213765492f4dfa7a3053b10f115e256d0e299
SHA5120ae7ecf1bc0a19396c1573460093a956c8c0c8fd039d1035367fb871201f89da00154be2e7c525527d79103cd489464c01f325d725a95b04864cc1f44588a611