Overview

overview

8

Static

static

6b62a2616b...ea.exe

windows7-x64

8

6b62a2616b...ea.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    192s
  • max time network
    199s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/11/2022, 22:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    6b62a2616b6e9137816daec65fca55af096733c0af0f65912ea84bc119ddd4ea.exe

  • Size

    3.0MB

  • MD5

    faea24e60e7690c82fb299e1a6a56e14

  • SHA1

    a94b90db10d6b5af3b79d58d8cf189b5ef1a0af7

  • SHA256

    6b62a2616b6e9137816daec65fca55af096733c0af0f65912ea84bc119ddd4ea

  • SHA512

    ad04dd65cb331025b44637da99958d63cad509396618e38019b536ff712984439049be5fb8bd4e37af25c773997df33e6cd0c4e67ade801e0abf7c3ed8ac2264

  • SSDEEP

    49152:1EF1ifrQ+jsdNSu45hgWfBPjRYCIu/l/RU0SfuntG3tCrNha5twGjdEpKZNJDMTN:1EF1iDQRm5hg2BPlCK/DyIhaEGjdEpmw

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6b62a2616b6e9137816daec65fca55af096733c0af0f65912ea84bc119ddd4ea.exe
    "C:\Users\Admin\AppData\Local\Temp\6b62a2616b6e9137816daec65fca55af096733c0af0f65912ea84bc119ddd4ea.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:1716

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\tf08c5577b.dll
          Filesize

          2.2MB

          MD5

          3c7a0d8759baea0c0c6d4d079c83da22

          SHA1

          0f8664936298fce83072ab21498ecd5d4b552343

          SHA256

          3e722e59514c72cfc879f800852c0a1144e33669d7d1fea054fa5e45d256a623

          SHA512

          66fa0fe43c149bd23c773c12c630cf9e334e539ef54e8b3108bd1c0f51a84daca8d260f1fa1eeff651a0c4d93b88b623b793477ff9f1edfe03b7c0efb0314025

          Download Submit

        • memory/1716-132-0x000000007FAF0000-0x000000007FE39000-memory.dmp

          Filesize

          3.3MB

          Download

        • memory/1716-138-0x000000007F640000-0x000000007F998000-memory.dmp

          Filesize

          3.3MB

          Download