Analysis

  • max time kernel
    235s
  • max time network
    333s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    24-11-2022 16:32

General

  • Target

    fc315600c661b224c56e8fa6db38847069c4b4ed53a9940885f5dc2f60a6ec55.exe

  • Size

    492KB

  • MD5

    5a8fa86d266cc1f7b3ad58f883d701fa

  • SHA1

    6a3bd029c6ff73b40c74947d8fa6d7e5f80a1dce

  • SHA256

    fc315600c661b224c56e8fa6db38847069c4b4ed53a9940885f5dc2f60a6ec55

  • SHA512

    ba01298a99b71e1dfaf6fb78b0f2f03130afec8a1d204532711104b15e6961a1857a3a1307145beca17dd179580b096f4466006eead0981e760ebbbbb76d5d99

  • SSDEEP

    6144:iXsVhUvKWItfLpQ9d3LtlEAZNCS5YcCQ7iLsjVaHkiyYNe3VFi1ROw3F6Zrjyb3G:icVhUvCsd7tFZI0oLNa6aiu

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc315600c661b224c56e8fa6db38847069c4b4ed53a9940885f5dc2f60a6ec55.exe
    "C:\Users\Admin\AppData\Local\Temp\fc315600c661b224c56e8fa6db38847069c4b4ed53a9940885f5dc2f60a6ec55.exe"
    1⤵
    • Loads dropped DLL
    PID:432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\023ae5c0-6e3d-4d89-b39a-45e46d48f8c2\AgileDotNetRT.dll
    Filesize

    121KB

    MD5

    b00823b0095b4bfaa0c0044e8c9759a5

    SHA1

    10dfacf94196d3f4a4cf09b9a502eb0c4a1d7e6e

    SHA256

    fbe82a7b20535f59650af688d4068038d9dca9a5d9bc3083645f8ee87a54f076

    SHA512

    69301f1d7077e7cb1cc208a143383a8bb0a4d3a75fe88d0a5df180c370d13d5368116cf13b9bbf9e26a84a83cc4328f5f151582c75dd47385f2f9a8966de4dd8

  • memory/432-54-0x0000000076931000-0x0000000076933000-memory.dmp
    Filesize

    8KB

  • memory/432-55-0x0000000074BD0000-0x000000007517B000-memory.dmp
    Filesize

    5.7MB

  • memory/432-57-0x0000000074230000-0x0000000074264000-memory.dmp
    Filesize

    208KB

  • memory/432-59-0x0000000074BD0000-0x000000007517B000-memory.dmp
    Filesize

    5.7MB

  • memory/432-60-0x0000000074230000-0x0000000074264000-memory.dmp
    Filesize

    208KB