Overview

overview

7

Static

static

f5b68effdb...10.exe

windows7-x64

7

f5b68effdb...10.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    202s
  • max time network
    208s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-12-2022 05:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f5b68effdb11dfa46a077c4b09dd51d9e691a11167a6ce0d66e2709cb5a47410.exe

  • Size

    3.1MB

  • MD5

    77bd550a1b89b49e475d9108cc028d55

  • SHA1

    5be0e05cbc61128d6447db8d0d35eec1cd4b3822

  • SHA256

    f5b68effdb11dfa46a077c4b09dd51d9e691a11167a6ce0d66e2709cb5a47410

  • SHA512

    68a539a7104f0baf80aa14741ce686f2413e5164d7a7e08b52dcb3a3aec0baf07ebd7b7c2a20c1cab5b33dd94d6cee5989cba4122df77b3f0f7de574f2c8afee

  • SSDEEP

    49152:MkG7pdm4xiSrFA+0bzub2J+ixKzonC0ttZKi4e4wR7A+PnhH4pINbq28Ao:/GFgsNb2byy0i4e4ohOIQz

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f5b68effdb11dfa46a077c4b09dd51d9e691a11167a6ce0d66e2709cb5a47410.exe
    "C:\Users\Admin\AppData\Local\Temp\f5b68effdb11dfa46a077c4b09dd51d9e691a11167a6ce0d66e2709cb5a47410.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:3376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GLC6551.tmp
    Filesize

    161KB

    MD5

    8c97d8bb1470c6498e47b12c5a03ce39

    SHA1

    15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7

    SHA256

    a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a

    SHA512

    7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLK6841.tmp
    Filesize

    33KB

    MD5

    07631941f67818659e0e97932224886f

    SHA1

    a5fa37d427480b569fa858ec66cca2a85d35a40d

    SHA256

    d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

    SHA512

    fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLK6841.tmp
    Filesize

    33KB

    MD5

    07631941f67818659e0e97932224886f

    SHA1

    a5fa37d427480b569fa858ec66cca2a85d35a40d

    SHA256

    d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

    SHA512

    fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

    Download Submit

  • memory/3376-135-0x0000000002121000-0x0000000002123000-memory.dmp

    Filesize

    8KB

    Download