Analysis

  • max time kernel
    156s
  • max time network
    178s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 15:11

General

  • Target

    e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exe

  • Size

    698KB

  • MD5

    f351029c56334ea331855c013bd60464

  • SHA1

    4cb144bf8a26f07a5b37c1c294427224a73bf7b3

  • SHA256

    e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c

  • SHA512

    c6cc2c22ec298cbffed3c4321793bcadf6b0db09924a97cfe84bf421936679c80f4492a147c09e1e7edbea5af9b24168465c79baa2db2d99a2694f31f495f89c

  • SSDEEP

    12288:cWcIaRjMQwT2wR7/RAfU+kDaNSxgamfylaI0wqRu7FwruP17wyKL9LOHTz7kMkvw:WFGpR/RAAaNvfylaIPqR+FpilPz4p

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exe
    "C:\Users\Admin\AppData\Local\Temp\e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exe"
    1⤵
    • Loads dropped DLL
    PID:4988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\c11f1908-ec82-406b-aa23-3ccb9a0d9d2b\AgileDotNetRT.dll
    Filesize

    119KB

    MD5

    6ee05d61422e4025f007d60da539b663

    SHA1

    98dfd05b896bce7cbd987d8012e055ee57cad30a

    SHA256

    edcffe546787dae9648270886275b5ff8dc5a5b358cc714645d6cb2f3f8d6880

    SHA512

    aa7f5555c3385c387b0e22411f76886b403bc503b6520b69849c7a3eb20a967aee84b8a8e4db7f96acb6ead98f61d6495f52b78c0505655d92e2f5dcc2ad17f2

  • memory/4988-132-0x0000000075440000-0x00000000759F1000-memory.dmp
    Filesize

    5.7MB

  • memory/4988-134-0x0000000074160000-0x00000000741BB000-memory.dmp
    Filesize

    364KB

  • memory/4988-135-0x0000000073940000-0x0000000073972000-memory.dmp
    Filesize

    200KB

  • memory/4988-136-0x0000000075440000-0x00000000759F1000-memory.dmp
    Filesize

    5.7MB

  • memory/4988-137-0x0000000073940000-0x0000000073972000-memory.dmp
    Filesize

    200KB

  • memory/4988-138-0x0000000075440000-0x00000000759F1000-memory.dmp
    Filesize

    5.7MB