Analysis

  • max time kernel
    91s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/12/2022, 22:18

General

  • Target
    boxer_trc_exe_PI.exe
  • Size 5.7MB
  • Sample221220-17ybgsbc23
  • SHA256 c5e11de6c91c453483b70bbde34bd99a5b9970a6ba4a898e42caa1f598d2d160
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\boxer_trc_exe_PI.exe
    "C:\Users\Admin\AppData\Local\Temp\boxer_trc_exe_PI.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4968
    • C:\Users\Admin\AppData\Local\Temp\boxer_trc_exe_PI.exe
      "C:\Users\Admin\AppData\Local\Temp\boxer_trc_exe_PI.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:4296
      • C:\Windows\SYSTEM32\tracert.exe
        tracert 1.1.1.1
        3⤵
          PID:3756
        • C:\Windows\SYSTEM32\arp.exe
          arp -a -v
          3⤵
            PID:2472

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            VCRUNTIME140.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\VCRUNTIME140.dll
            • Size 93KB
            • SHA256 6a0850419432735a98e56857d5cfce97e9d58a947a9863ca6afadd1c7bcab27c
            • MD5 SHA1 SHA512 SSDEEP

            VCRUNTIME140.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\VCRUNTIME140.dll
            • Size 93KB
            • SHA256 6a0850419432735a98e56857d5cfce97e9d58a947a9863ca6afadd1c7bcab27c
            • MD5 SHA1 SHA512 SSDEEP

            _bz2.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_bz2.pyd
            • Size 85KB
            • SHA256 ce4ef8ed1e72c1d3a6082d500a17a009eb6e8ed15022bf3b68a22291858feced
            • MD5 SHA1 SHA512 SSDEEP

            _bz2.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_bz2.pyd
            • Size 85KB
            • SHA256 ce4ef8ed1e72c1d3a6082d500a17a009eb6e8ed15022bf3b68a22291858feced
            • MD5 SHA1 SHA512 SSDEEP

            _hashlib.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_hashlib.pyd
            • Size 46KB
            • SHA256 a30cf1a40e0b09610e34be187f1396ac5a44dcfb27bc7ff9b450d1318b694c1b
            • MD5 SHA1 SHA512 SSDEEP

            _hashlib.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_hashlib.pyd
            • Size 46KB
            • SHA256 a30cf1a40e0b09610e34be187f1396ac5a44dcfb27bc7ff9b450d1318b694c1b
            • MD5 SHA1 SHA512 SSDEEP

            _lzma.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_lzma.pyd
            • Size 159KB
            • SHA256 9209ccc60115727b192bf7771551040ca6fdd50f9bf8c3d2eacbfd424e8245e4
            • MD5 SHA1 SHA512 SSDEEP

            _lzma.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_lzma.pyd
            • Size 159KB
            • SHA256 9209ccc60115727b192bf7771551040ca6fdd50f9bf8c3d2eacbfd424e8245e4
            • MD5 SHA1 SHA512 SSDEEP

            _queue.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_queue.pyd
            • Size 28KB
            • SHA256 67e4e888559ea2c62ff267b58d7a7e95c2ec361703b5aa232aa8b2a1f96a2051
            • MD5 SHA1 SHA512 SSDEEP

            _queue.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_queue.pyd
            • Size 28KB
            • SHA256 67e4e888559ea2c62ff267b58d7a7e95c2ec361703b5aa232aa8b2a1f96a2051
            • MD5 SHA1 SHA512 SSDEEP

            _socket.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_socket.pyd
            • Size 78KB
            • SHA256 87832a3b89e2ada8f704a8f066013660d591d9ce01ce901cc57a3b973f0858ba
            • MD5 SHA1 SHA512 SSDEEP

            _socket.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_socket.pyd
            • Size 78KB
            • SHA256 87832a3b89e2ada8f704a8f066013660d591d9ce01ce901cc57a3b973f0858ba
            • MD5 SHA1 SHA512 SSDEEP

            _ssl.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_ssl.pyd
            • Size 152KB
            • SHA256 0a721fc230eca278a69a2006e13dfa00e698274281378d4df35227e1f68ea3e0
            • MD5 SHA1 SHA512 SSDEEP

            _ssl.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\_ssl.pyd
            • Size 152KB
            • SHA256 0a721fc230eca278a69a2006e13dfa00e698274281378d4df35227e1f68ea3e0
            • MD5 SHA1 SHA512 SSDEEP

            base_library.zip

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\base_library.zip
            • Size 1008KB
            • SHA256 6f0f43477d1fda625f853edece7bfad275906924eecd48a8549ac79b6f4785fa
            • MD5 SHA1 SHA512 SSDEEP

            libcrypto-1_1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\libcrypto-1_1.dll
            • Size 3.2MB
            • SHA256 296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf
            • MD5 SHA1 SHA512 SSDEEP

            libcrypto-1_1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\libcrypto-1_1.dll
            • Size 3.2MB
            • SHA256 296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf
            • MD5 SHA1 SHA512 SSDEEP

            libcrypto-1_1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\libcrypto-1_1.dll
            • Size 3.2MB
            • SHA256 296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf
            • MD5 SHA1 SHA512 SSDEEP

            libssl-1_1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\libssl-1_1.dll
            • Size 674KB
            • SHA256 fddd0da02dcd41786e9aa04ba17ba391ce39dae6b1f54cfa1e2bb55bc753fce9
            • MD5 SHA1 SHA512 SSDEEP

            libssl-1_1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\libssl-1_1.dll
            • Size 674KB
            • SHA256 fddd0da02dcd41786e9aa04ba17ba391ce39dae6b1f54cfa1e2bb55bc753fce9
            • MD5 SHA1 SHA512 SSDEEP

            python38.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\python38.dll
            • Size 4.0MB
            • SHA256 2f3e368f5bcc1dda5e951682008a509751e6395f7328fd0f02c4e1a11f67c128
            • MD5 SHA1 SHA512 SSDEEP

            python38.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\python38.dll
            • Size 4.0MB
            • SHA256 2f3e368f5bcc1dda5e951682008a509751e6395f7328fd0f02c4e1a11f67c128
            • MD5 SHA1 SHA512 SSDEEP

            select.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\select.pyd
            • Size 27KB
            • SHA256 fcc2e09a2355a5546922874fb4cac92ee00a33c0ed6adbc440d128d1e9f4ec28
            • MD5 SHA1 SHA512 SSDEEP

            select.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\select.pyd
            • Size 27KB
            • SHA256 fcc2e09a2355a5546922874fb4cac92ee00a33c0ed6adbc440d128d1e9f4ec28
            • MD5 SHA1 SHA512 SSDEEP

            unicodedata.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\unicodedata.pyd
            • Size 1.0MB
            • SHA256 d8091e62c74e1b2b648086f778c3c41ce01f09661a75ea207d3fea2cf26a8762
            • MD5 SHA1 SHA512 SSDEEP

            unicodedata.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49682\unicodedata.pyd
            • Size 1.0MB
            • SHA256 d8091e62c74e1b2b648086f778c3c41ce01f09661a75ea207d3fea2cf26a8762
            • MD5 SHA1 SHA512 SSDEEP