Analysis

  • max time kernel
    177s
  • max time network
    194s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 15:31

General

  • Target

    9c58def6a53ad6a46a461c9bb14f2aa6f74a612a6a5797748588a0aac68e18f6.exe

  • Size

    292KB

  • MD5

    240103f6ef686b193eeb914e900fc704

  • SHA1

    3aaa5ac6f5c4ead9e752b600be408ed2e014bfcc

  • SHA256

    9c58def6a53ad6a46a461c9bb14f2aa6f74a612a6a5797748588a0aac68e18f6

  • SHA512

    7d1e54fdd66ce02fc95933a824dfaf2c54091ad13d27396d9a5d73bfc2aa3d168b76a5d671c6f606ca64c4212ab78a28c5a7d1ee61228b2e7df91fc2dce48bd8

  • SSDEEP

    6144:+rkI6Y0JQBkQRl7174NpNUM+UHs+1bL28uDrexqtreJA3/fkqnZr8uyaNPl7JCz:+rkI63yRl1uqM+gs+1+tPexUuA3/fBZc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9c58def6a53ad6a46a461c9bb14f2aa6f74a612a6a5797748588a0aac68e18f6.exe
    "C:\Users\Admin\AppData\Local\Temp\9c58def6a53ad6a46a461c9bb14f2aa6f74a612a6a5797748588a0aac68e18f6.exe"
    1⤵
    • Loads dropped DLL
    PID:588

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\TsuBBCF8464.dll

          Filesize

          269KB

          MD5

          af7ce801c8471c5cd19b366333c153c4

          SHA1

          4267749d020a362edbd25434ad65f98b073581f1

          SHA256

          cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

          SHA512

          88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

        • C:\Users\Admin\AppData\Local\Temp\{766665A5-A0E7-4A91-A87A-E8C5AD854753}\Custom.dll

          Filesize

          62KB

          MD5

          3e15e552c1ae8a955bcf6ede52cec47d

          SHA1

          e0a7d81eb177c6ad0cd4e314d914414ec7d11dbe

          SHA256

          d210f4e66e5a8d0ba80dd4f76142976eedbe8c93272cd306ad980686542c0e14

          SHA512

          7cbe709a7f598d206b606d30cd784f828467880bea343930428d07d40ed5e7f4dd76d4e898c71643ec3079c4cf328f7ee9f0a224ca8e5dce8e87ea20f18865b3

        • C:\Users\Admin\AppData\Local\Temp\{766665A5-A0E7-4A91-A87A-E8C5AD854753}\_Setup.dll

          Filesize

          162KB

          MD5

          bf2742e4f3af1a4c812cb6092de3f5ab

          SHA1

          a8a681d539d228943d8a58a126d15e735d641fcf

          SHA256

          e078631151b1811ead30a4d1202bd65c14fd90935df253f1bde1d25522c21a93

          SHA512

          61082c8f047f7a5355dd66ab3d398c53603a4e4817d8f6927675f2c0380b4555befc295f82b3389291ca07f858a74166bb123054904c77cfc950c68704787238