Overview

overview

7

Static

static

c76c3eeaae...b0.exe

windows7-x64

7

c76c3eeaae...b0.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    188s
  • max time network
    69s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03/12/2022, 14:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c76c3eeaaefa6392d7340fc05e2b8ab2fab787744f9d1e5a0150943dc65c9eb0.exe

  • Size

    292KB

  • MD5

    4cd894ae2ec0c201b013b9a64e7c5a38

  • SHA1

    b5b9d4d7ffcaae605215ff7718cfbccb4eae9fb6

  • SHA256

    c76c3eeaaefa6392d7340fc05e2b8ab2fab787744f9d1e5a0150943dc65c9eb0

  • SHA512

    6d0aadcba7033151468d5e4361611b431faa7b03fed935de023cbf2cfcbf30cb592a966d50e8b0fcb79082b3fc771ebb60ebbdfe80021742c3c10ac18bf7010a

  • SSDEEP

    6144:+rkI6Y0JQBkQRl7174NpNUM+UHs+1bL28uDrexqtreJA3/fkqnZr8uyaNPl7JCR:+rkI63yRl1uqM+gs+1+tPexUuA3/fBZG

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c76c3eeaaefa6392d7340fc05e2b8ab2fab787744f9d1e5a0150943dc65c9eb0.exe
    "C:\Users\Admin\AppData\Local\Temp\c76c3eeaaefa6392d7340fc05e2b8ab2fab787744f9d1e5a0150943dc65c9eb0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu0C258708.dll
    Filesize

    269KB

    MD5

    af7ce801c8471c5cd19b366333c153c4

    SHA1

    4267749d020a362edbd25434ad65f98b073581f1

    SHA256

    cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

    SHA512

    88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{52D23566-07AA-4A7C-A897-4F8889311790}\Custom.dll
    Filesize

    62KB

    MD5

    3e15e552c1ae8a955bcf6ede52cec47d

    SHA1

    e0a7d81eb177c6ad0cd4e314d914414ec7d11dbe

    SHA256

    d210f4e66e5a8d0ba80dd4f76142976eedbe8c93272cd306ad980686542c0e14

    SHA512

    7cbe709a7f598d206b606d30cd784f828467880bea343930428d07d40ed5e7f4dd76d4e898c71643ec3079c4cf328f7ee9f0a224ca8e5dce8e87ea20f18865b3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{52D23566-07AA-4A7C-A897-4F8889311790}\_Setup.dll
    Filesize

    162KB

    MD5

    bf2742e4f3af1a4c812cb6092de3f5ab

    SHA1

    a8a681d539d228943d8a58a126d15e735d641fcf

    SHA256

    e078631151b1811ead30a4d1202bd65c14fd90935df253f1bde1d25522c21a93

    SHA512

    61082c8f047f7a5355dd66ab3d398c53603a4e4817d8f6927675f2c0380b4555befc295f82b3389291ca07f858a74166bb123054904c77cfc950c68704787238

    Download Submit

  • memory/316-55-0x0000000075FF1000-0x0000000075FF3000-memory.dmp

    Filesize

    8KB

    Download