Overview

overview

7

Static

static

ad0f906954...33.exe

windows7-x64

7

ad0f906954...33.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    152s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 06:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    ad0f9069548a53f4e84272bab5de818c2646b6edce6cdd4dac57308827647833.exe

  • Size

    297KB

  • MD5

    6c7743a2d40c79375ad4827c38ee8c62

  • SHA1

    8e3ba13c12277082f1184a1a4559687898bacb8a

  • SHA256

    ad0f9069548a53f4e84272bab5de818c2646b6edce6cdd4dac57308827647833

  • SHA512

    03ec2b234ed28bf45561632e7a29f91c88577c12f91c396e7bd86215e1a6b98b64beb2c92c075d99e4d473359ed7775b61997eeb9e4780d2b0897185b5035d74

  • SSDEEP

    6144:lgsX5w78W1xrLitFHIp1TP6IUIJxgSQZf3AEfk3COjB8tgnFKzEsTh5/V1lB:lgU5w7dxv6FH6l6IUFvA0iCOV8tWM7Tb

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad0f9069548a53f4e84272bab5de818c2646b6edce6cdd4dac57308827647833.exe
    "C:\Users\Admin\AppData\Local\Temp\ad0f9069548a53f4e84272bab5de818c2646b6edce6cdd4dac57308827647833.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:5076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu36588BD2.dll
          Filesize

          267KB

          MD5

          138810868216da6c31f1c3faa4e3ff4c

          SHA1

          076f99ef5a4a6c3f32b9ab282de0b66b49afd860

          SHA256

          23f073d05ef6165f38dd5b438d04131f4b95544f1c19ce8230f3ddd1dfe58dce

          SHA512

          e7eea1a8bd66a4e1e91229d31afde034af7be881603e608171ca37e5802eb726be31c23d46af5538f408c01db7687768e04ec056512fd8afb2d979676ad25c3c

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\{160B61C3-B8DA-D74D-35A6-F0F8CDE84335}\_Setup.dll
          Filesize

          206KB

          MD5

          a86aa410fb6cec9f140fb7fd12882be9

          SHA1

          c79c4159ad05ee31aeef9b6bbd505d96f41e1fac

          SHA256

          a3903f89d8eef0cc9c365a2db4fca0ca1f0654390f182b44e7769454c1aab974

          SHA512

          70d689077d29ba8138968551b87be405db42c05b547ef36217bc64b548bb41a281086cf02828b9cbd8925e2fda598606c41129b8fd3c7f2e0b630b4188ea800e

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\{160B61C3-B8DA-D74D-35A6-F0F8CDE84335}\_Setupx.dll
          Filesize

          42KB

          MD5

          66e0d3cb3825b658880be576875795bc

          SHA1

          740982ce3b3e4bd08c1cbd5fc8cfeb982f1d4e05

          SHA256

          27b7921fbbd360bf77db65a50b2cd9a600e6baaaf77fd60eee74476d9fc6c7e0

          SHA512

          23873b2052f66d3b5961cfd5ca26d4d3f507cbd0317116e6b773d23defe47c164e1040fb56392f17cd2644528c64dfbfdeccc46e1965a650786414c8f8f74c7b

          Download Submit