Overview

overview

7

Static

static

5ff2fd50dd...a3.exe

windows7-x64

7

5ff2fd50dd...a3.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    373s
  • max time network
    433s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-12-2022 01:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5ff2fd50dde1842e7705e58791580b7e75165260dfbf0f512447173c9447e0a3.exe

  • Size

    1.8MB

  • MD5

    5f8e1de1fd3af63cc411c7764abf03a2

  • SHA1

    ae22b4d2b8a56193e13f99b23a15ead7b10e043a

  • SHA256

    5ff2fd50dde1842e7705e58791580b7e75165260dfbf0f512447173c9447e0a3

  • SHA512

    476011767bbbc4ad7f7e543cfa287e3e665b7b0bfd86819bb72b03b6ba0350576fd9a4fbd53566dbcc99700c497d3d030cb6ec0a03330d6260ed404f47466dfa

  • SSDEEP

    49152:+lOC1w4pYaasY6DwOBfrnvV7UeWt2bExrl5VeI:+4C1wInYiwOBpIeW9rlXeI

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ff2fd50dde1842e7705e58791580b7e75165260dfbf0f512447173c9447e0a3.exe
    "C:\Users\Admin\AppData\Local\Temp\5ff2fd50dde1842e7705e58791580b7e75165260dfbf0f512447173c9447e0a3.exe"
    1⤵
    • Loads dropped DLL
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    PID:896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\dgdxu3fa.lpo\7z.dll
    Filesize

    893KB

    MD5

    04ad4b80880b32c94be8d0886482c774

    SHA1

    344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

    SHA256

    a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

    SHA512

    3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

    Download Submit

  • memory/896-132-0x00000000746E0000-0x0000000074C91000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/896-134-0x00000000746E0000-0x0000000074C91000-memory.dmp

    Filesize

    5.7MB

    Download