Analysis

  • max time kernel
    39s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    30-11-2022 21:24

General

  • Target

    cb74bdb1c5e53bc84ea809be9061ffad83872f739a4f8ca6285cbebf9b71842b.exe

  • Size

    792KB

  • MD5

    633ea5dc6ac979e3eed798eea500cd0a

  • SHA1

    8842b03ae488e596f1a051f7a2e48bda1cbd8ab5

  • SHA256

    cb74bdb1c5e53bc84ea809be9061ffad83872f739a4f8ca6285cbebf9b71842b

  • SHA512

    fb4bc3fafd38e8e93f5077b83cd6ff005005b8b795811ef30c024407bb7e88da5f541659c00785eb1d8de2e0e2d67f26478271c7735c8a0c7d8d3a3a8152744a

  • SSDEEP

    6144:OiUToe2ZBw7A5Z23E8MFMrK9bBE309giUT4e2ZBw7A5Z23E8MFMrU9bBE3:ORsZC7AXutRMKRcZC7AXutRe

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

Processes

  • C:\Users\Admin\AppData\Local\Temp\cb74bdb1c5e53bc84ea809be9061ffad83872f739a4f8ca6285cbebf9b71842b.exe
    "C:\Users\Admin\AppData\Local\Temp\cb74bdb1c5e53bc84ea809be9061ffad83872f739a4f8ca6285cbebf9b71842b.exe"
    1⤵
      PID:1744

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1744-54-0x0000000075A31000-0x0000000075A33000-memory.dmp
      Filesize

      8KB

    • memory/1744-55-0x0000000000400000-0x00000000004C6000-memory.dmp
      Filesize

      792KB