Analysis

  • max time kernel
    30s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28-11-2022 15:11

General

  • Target

    177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exe

  • Size

    407KB

  • MD5

    18984b27fb287c290edcaf2435da9e36

  • SHA1

    85605786b98298294e9e2115c4a384d72f566dfd

  • SHA256

    177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42

  • SHA512

    2efbd48b02dca536806edcbc8090dcd7cebd2c7c118bff1d1f8a62857d78bec1c7c282f37e0b77ae9b809f79c0de6b7f9cb3b87980f5354dc5f9d622642b954a

  • SSDEEP

    6144:JLu0bgLkDHmfXwXsCaIMdXwqRuw8Ttcnyzv5+AeDkaBR+YJFC3:JTgamfylaI0wqRu7Fwr7F

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exe
    "C:\Users\Admin\AppData\Local\Temp\177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exe"
    1⤵
    • Loads dropped DLL
    PID:1044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\3e36ec64-460c-46a2-8c94-d8263dc20340\AgileDotNetRT.dll
    Filesize

    119KB

    MD5

    6ee05d61422e4025f007d60da539b663

    SHA1

    98dfd05b896bce7cbd987d8012e055ee57cad30a

    SHA256

    edcffe546787dae9648270886275b5ff8dc5a5b358cc714645d6cb2f3f8d6880

    SHA512

    aa7f5555c3385c387b0e22411f76886b403bc503b6520b69849c7a3eb20a967aee84b8a8e4db7f96acb6ead98f61d6495f52b78c0505655d92e2f5dcc2ad17f2

  • memory/1044-54-0x0000000075601000-0x0000000075603000-memory.dmp
    Filesize

    8KB

  • memory/1044-57-0x00000000741C0000-0x000000007476B000-memory.dmp
    Filesize

    5.7MB

  • memory/1044-58-0x0000000073480000-0x00000000734B2000-memory.dmp
    Filesize

    200KB

  • memory/1044-60-0x0000000073480000-0x00000000734B2000-memory.dmp
    Filesize

    200KB

  • memory/1044-59-0x00000000741C0000-0x000000007476B000-memory.dmp
    Filesize

    5.7MB