Analysis
-
max time kernel
42s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
22/12/2022, 09:04
Static task
static1
Behavioral task
behavioral1
Sample
CreamInstaller.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
CreamInstaller.exe
Resource
win10v2004-20221111-en
General
-
Target
CreamInstaller.exe
-
Size
119.3MB
-
MD5
d462fe8e6837c87479137841ef6e0725
-
SHA1
78bc375c2a4ae7a5d2a6211c0ff09abc30aa9465
-
SHA256
2f11b9480ad362e7eaebc42bdfc61b4bbd167a456b0f7be4d47a9918d43b15a0
-
SHA512
2c9f9d78290f618aa6444b60055f347df898d88e70d86c91667d66fc42900da490e92c4a7e34a01ba0068b27a4963765dfef3be5b7f5af672e37b9f6191afc3a
-
SSDEEP
3145728:zRA0j4oQkV2q9yh0oQBBOr48OAkZgL5fAUQ:6kQcb9yuUkZgtM
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 1928 CreamInstaller.exe 1928 CreamInstaller.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\29SW40v7WagChcAv8EXg+Q1nyFgKauo=\CreamInstaller.r2r.dll
Filesize87.5MB
MD59096c5a3e80f50b1d9884b3563703861
SHA175a28a1d879bc5ce10dc8383b0c4c51859017c3a
SHA256b2b61d302918808646a700dfebc996c29c547e8772215acf8df5d042a6bf6e55
SHA5126b24663eedcd264c3bbc79fa26a6c32faa9605c4e96ad57b870bf78c0871c693d3c11de62af184a852e69005ce66ff34bb7fe259aa76842e917039acb3fe1851
-
\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\29SW40v7WagChcAv8EXg+Q1nyFgKauo=\System.Private.CoreLib.dll
Filesize4.1MB
MD5d3b76d3d79acdda5bbf59fe9a533d575
SHA1c1b33f6f806c3d07894d67f0a24172c08d5142ba
SHA256d58f95306cd6568c4b5f13b30ce2162be3f6f85bd54835f4be378c616c5fe43a
SHA5128e6fcd7be13a326b40f4a4d349bb07a6757ffa531aab91e874e234c3597ee2509142bcd65ae98d4d3c7d1ab70b1bad3e570655fb3b37723656641c3e0a976e7f