Overview

overview

8

Static

static

cf9cd6a6b4...f2.exe

windows7-x64

8

cf9cd6a6b4...f2.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    361s
  • max time network
    366s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 20:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2.exe

  • Size

    5.8MB

  • MD5

    d8f133f6ac989889d64decd864fe803e

  • SHA1

    79b3068e05a48a197cd4f8a37a9e33ab087e5875

  • SHA256

    cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2

  • SHA512

    d5b64848d7194154f08f72d96f4d40cc8e193e3804d2ffb2c7ce079a5084c6534f61ca9352392314b34efcf21318e03ed9479f33e88306526347c4703bd6fd1c

  • SSDEEP

    98304:nFastLdG1V67xuqI+cprrXTUJ7S54zlyNnA9GjfunztH9Cq8G197QdJpJMr2Pv:nFaMpyI74l+cpjgJS5a4NnxfuR4qzurF

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2.exe
    "C:\Users\Admin\AppData\Local\Temp\cf9cd6a6b483d7006af6dc8ac5ae2fbd69a0d70f22fcbc9d8a2e241ba4f26df2.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:3748

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\tf00294823.dll
          Filesize

          3.9MB

          MD5

          5a553d9519346659b12036b1c7f76256

          SHA1

          3f35c278acf7407d3f7a2a0b98ad9925ca6b2fdc

          SHA256

          b5e3bed35563d047e25abd77f00c57c93e5bd65bab59d025d3cb4ce28c8dbd07

          SHA512

          3985bbee5a77fe41b6361fedf2d20a4ecaa29eab9d795f460a2c43a681a51bedf5d3d7f3af6b173061f76be3cc5074028d38f7319ba8d878a7b36e60f88e087d

          Download Submit

        • memory/3748-132-0x000000007F4A0000-0x000000007F97E000-memory.dmp

          Filesize

          4.9MB

          Download

        • memory/3748-138-0x000000007F010000-0x000000007F356000-memory.dmp

          Filesize

          3.3MB

          Download