Analysis
- max time kernel
389s - max time network
479s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
27/11/2022, 18:58
Static task
static1
Behavioral task
behavioral1
Sample
f63b7d925e35239721c4c753f10449687d7f1beb94727af3404067c992c20d8f.exe
Resource
win7-20220812-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f63b7d925e35239721c4c753f10449687d7f1beb94727af3404067c992c20d8f.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
- Target f63b7d925e35239721c4c753f10449687d7f1beb94727af3404067c992c20d8f.exe
- Size 316KB
- Sample221127-xmwelsfa31
- SHA256 f63b7d925e35239721c4c753f10449687d7f1beb94727af3404067c992c20d8f
- MD5 4613c0b319f936bae50e1ef340a7f323
- SHA1 09dcef21f5013f50ef801b4058271be6d233039c
- SHA512 8a876fe0414a82c1a30887006384c2874f25d18eaf091e5349013d0d8574658619a04b122e0aa8418ac0ea948420677f41eaa59131d6b19e27d16b4529c6f118
- SSDEEP 6144:yribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xE:yr7kuveY33FJUo7MDkA6l
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 4912 f63b7d925e35239721c4c753f10449687d7f1beb94727af3404067c992c20d8f.exe 4912 f63b7d925e35239721c4c753f10449687d7f1beb94727af3404067c992c20d8f.exe 4912 f63b7d925e35239721c4c753f10449687d7f1beb94727af3404067c992c20d8f.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Tsu65A491BC.dll
- Size 269KB
- SHA256 cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e
- MD5 af7ce801c8471c5cd19b366333c153c4
- SHA1 4267749d020a362edbd25434ad65f98b073581f1
- SHA512 88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c
- SSDEEP 6144:N/rdStrfAftBVju6v+UvrBhMo27dOQnyddk:J3y6vHvrBhLYjnydC
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\{D443AE18-8634-4192-A379-CE160FA08CEE}\Custom.dll
- Size 91KB
- SHA256 1bf33578f57d6436e916cc0734e8adc66a0e3c7ca5de1290601a73e3e362419d
- MD5 d2b596fa229e1b03704c9e9c3b4d4aa0
- SHA1 19c57157c2e9b58037a7d2bca4909cbf125e9a23
- SHA512 4e0d8ba8aea2c36ec79c86dcb6febe28ee0788d6a4d94231b5de10930e7fe0d285786bf6bfc3d85d8f1e83a4fb65f0f8a24e691c3298fce60ccef9a434a0d9c0
- SSDEEP 1536:K7xcx/juCKV+hVboYrEhySESy9GNGU6u1Go6eOYM++vvncYRU:K7qxa8NoYr6w5S8o6epM++v/cYq
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\{D443AE18-8634-4192-A379-CE160FA08CEE}\_Setup.dll
- Size 173KB
- SHA256 a2879be2df754addca789fdd9d7d52dff21687414a2579ed8e05aaf9fb283822
- MD5 be16f8d320da824f0db58ef6d75c75c6
- SHA1 9c3993bbfa92ca6d5dc2b2721716f5040bb22d82
- SHA512 bbe5e522f5ef988d2ff216a5afc16fd5ee39244839f4ec6382f77d70df1dfe11e35cfad1ec4446ff06849c04c1e681bf312a9ea9623f96eac9e0677bab7eb1f0
- SSDEEP 3072:/8+S4cNJtkAlRHAAMHnS9qkJUsCmBW/fpICcsRuUwZxcUdONKnNPZv8FK4Us9ZjJ:g
- MD5 SHA1 SHA512 SSDEEP