Analysis

  • max time kernel
    20s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    28-11-2022 16:11

General

  • Target

    e0d1e04b91930625c7fe0ad3698792a9cdb9c827e572c5c04ef0700b967912a2.exe

  • Size

    501KB

  • MD5

    0e788dd82676738ee3a0182aaade9363

  • SHA1

    80df1c5382a8d19084e1ad4a1ceccf3acb537086

  • SHA256

    e0d1e04b91930625c7fe0ad3698792a9cdb9c827e572c5c04ef0700b967912a2

  • SHA512

    d2ccef2a016106c28af3aa4aadb1207fd3c86fed5a2b38a7e9501e9a38cd168e9bebe85b75b2748b304c0220060aca12db94d427a98898e3ede20c54412a6c49

  • SSDEEP

    12288:CZmGFxZLgamfylaI0wqRu7Fwrhqkx4Nl8O1ccatS4RXKb/jQhvZn:8tFxufylaIPqR+F8yBrYRab/UhR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0d1e04b91930625c7fe0ad3698792a9cdb9c827e572c5c04ef0700b967912a2.exe
    "C:\Users\Admin\AppData\Local\Temp\e0d1e04b91930625c7fe0ad3698792a9cdb9c827e572c5c04ef0700b967912a2.exe"
    1⤵
    • Loads dropped DLL
    PID:1120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\b5bd56b3-8abc-421c-8fac-5de24e72130c\AgileDotNetRT.dll
    Filesize

    119KB

    MD5

    6ee05d61422e4025f007d60da539b663

    SHA1

    98dfd05b896bce7cbd987d8012e055ee57cad30a

    SHA256

    edcffe546787dae9648270886275b5ff8dc5a5b358cc714645d6cb2f3f8d6880

    SHA512

    aa7f5555c3385c387b0e22411f76886b403bc503b6520b69849c7a3eb20a967aee84b8a8e4db7f96acb6ead98f61d6495f52b78c0505655d92e2f5dcc2ad17f2

  • memory/1120-54-0x0000000075291000-0x0000000075293000-memory.dmp
    Filesize

    8KB

  • memory/1120-57-0x0000000074100000-0x00000000746AB000-memory.dmp
    Filesize

    5.7MB

  • memory/1120-58-0x0000000073520000-0x0000000073552000-memory.dmp
    Filesize

    200KB

  • memory/1120-59-0x0000000074100000-0x00000000746AB000-memory.dmp
    Filesize

    5.7MB

  • memory/1120-60-0x0000000073520000-0x0000000073552000-memory.dmp
    Filesize

    200KB