Analysis

  • max time kernel
    142s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 10:54

General

  • Target

    e2f028f244b705ba4d521db1abbee102a9b74ef9690892ba948976cf3a1440e6.exe

  • Size

    301KB

  • MD5

    12df26ff92a3cc003efaa5e8e8d745b0

  • SHA1

    8ec238ad6636c3d929ac744a04e04fc8fcbb372c

  • SHA256

    e2f028f244b705ba4d521db1abbee102a9b74ef9690892ba948976cf3a1440e6

  • SHA512

    d6bab78787107fc0de7a16d8e9db94139ea9b74df6d074517c21c392cb7c47fa1dedcc2839126953103fe637049c6539e14fc7f5aea112188d3469e88ca23a8c

  • SSDEEP

    6144:SrV/9uEo2S1YnQmCX492DkwNP3qpYFr7VhXbRUtDqGX6polbLFs:SrV1u6/eIo4g7VIRX6po5LO

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e2f028f244b705ba4d521db1abbee102a9b74ef9690892ba948976cf3a1440e6.exe
    "C:\Users\Admin\AppData\Local\Temp\e2f028f244b705ba4d521db1abbee102a9b74ef9690892ba948976cf3a1440e6.exe"
    1⤵
    • Loads dropped DLL
    PID:4300

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu7E06F740.dll

          Filesize

          269KB

          MD5

          af7ce801c8471c5cd19b366333c153c4

          SHA1

          4267749d020a362edbd25434ad65f98b073581f1

          SHA256

          cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

          SHA512

          88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

        • C:\Users\Admin\AppData\Local\Temp\{8D8D60AE-02B2-450C-A7E7-4A90566E4258}\Custom.dll

          Filesize

          63KB

          MD5

          3fa769ed1d2b9091f3efbc57fb68f549

          SHA1

          789f143223f269d7e890f454601af87b21ef6426

          SHA256

          70530c068b47268d47d0712b6f77d2d90665d548ff691f7994691c69dda54f48

          SHA512

          2725a892a2d12b7cc7327d5263831efbb21909a7ec1e775fb3c26c73e77475f295e7156469bf336d695926cfb48c8520aff1c6efddfb6cb3cdf2a80f4bd314e5

        • C:\Users\Admin\AppData\Local\Temp\{8D8D60AE-02B2-450C-A7E7-4A90566E4258}\_Setup.dll

          Filesize

          160KB

          MD5

          59402a7e186716680025f44c0901e227

          SHA1

          1abfe8ebcba6b6b655a4aa0196039c670bdaeb3a

          SHA256

          f1d3cb9fdd48adaaf8019669ed9f32538507af669e1510d9d9af7bb74efa3135

          SHA512

          a420d69f25ee95a342a213ef6b89f53f2207e0c25f60fe0b566327008f81e89caed6ed0e948834c90739ca2f72f926411afb7097b559e9e8ab4c3f2499522bb3