Overview

overview

7

Static

static

cf3a711a7d...af.exe

windows7-x64

7

cf3a711a7d...af.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 12:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe

  • Size

    1.5MB

  • MD5

    51278022bcac98d0d7299119fc27b1ee

  • SHA1

    d08d56bc5e5422e08edeb35725d6bdd4ba5ef345

  • SHA256

    cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf

  • SHA512

    d053332fbc8a4166f72c302fbaa71749b898e8719f782f75ce5cbe21b109c413c7cb4758c8d3f6177a0d2f4ba6986f17762f213bccde432e9e1ad3385d154f55

  • SSDEEP

    24576:0kbfuOCAl0oR4CbIW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJZq3IVxSI:0a2OC1U4PasY6DwOBfrnvV7UeWtbqGj

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe
    "C:\Users\Admin\AppData\Local\Temp\cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe"
    1⤵
    • Loads dropped DLL
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\unvvldcr.jit\7z.dll
    Filesize

    893KB

    MD5

    04ad4b80880b32c94be8d0886482c774

    SHA1

    344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

    SHA256

    a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

    SHA512

    3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\unvvldcr.jit\7z.dll
    Filesize

    893KB

    MD5

    04ad4b80880b32c94be8d0886482c774

    SHA1

    344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

    SHA256

    a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

    SHA512

    3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\unvvldcr.jit\7z.dll
    Filesize

    893KB

    MD5

    04ad4b80880b32c94be8d0886482c774

    SHA1

    344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

    SHA256

    a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

    SHA512

    3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

    Download Submit

  • memory/4480-132-0x0000000074A30000-0x0000000074FE1000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/4480-133-0x0000000074A30000-0x0000000074FE1000-memory.dmp

    Filesize

    5.7MB

    Download