Analysis

  • max time kernel
    42s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2022, 09:04

General

  • Target

    CreamInstaller.exe

  • Size

    119.3MB

  • MD5

    d462fe8e6837c87479137841ef6e0725

  • SHA1

    78bc375c2a4ae7a5d2a6211c0ff09abc30aa9465

  • SHA256

    2f11b9480ad362e7eaebc42bdfc61b4bbd167a456b0f7be4d47a9918d43b15a0

  • SHA512

    2c9f9d78290f618aa6444b60055f347df898d88e70d86c91667d66fc42900da490e92c4a7e34a01ba0068b27a4963765dfef3be5b7f5af672e37b9f6191afc3a

  • SSDEEP

    3145728:zRA0j4oQkV2q9yh0oQBBOr48OAkZgL5fAUQ:6kQcb9yuUkZgtM

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CreamInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\CreamInstaller.exe"
    1⤵
    • Loads dropped DLL
    PID:1928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\.net\CreamInstaller\29SW40v7WagChcAv8EXg+Q1nyFgKauo=\CreamInstaller.r2r.dll

          Filesize

          87.5MB

          MD5

          9096c5a3e80f50b1d9884b3563703861

          SHA1

          75a28a1d879bc5ce10dc8383b0c4c51859017c3a

          SHA256

          b2b61d302918808646a700dfebc996c29c547e8772215acf8df5d042a6bf6e55

          SHA512

          6b24663eedcd264c3bbc79fa26a6c32faa9605c4e96ad57b870bf78c0871c693d3c11de62af184a852e69005ce66ff34bb7fe259aa76842e917039acb3fe1851

        • \Users\Admin\AppData\Local\Temp\.net\CreamInstaller\29SW40v7WagChcAv8EXg+Q1nyFgKauo=\System.Private.CoreLib.dll

          Filesize

          4.1MB

          MD5

          d3b76d3d79acdda5bbf59fe9a533d575

          SHA1

          c1b33f6f806c3d07894d67f0a24172c08d5142ba

          SHA256

          d58f95306cd6568c4b5f13b30ce2162be3f6f85bd54835f4be378c616c5fe43a

          SHA512

          8e6fcd7be13a326b40f4a4d349bb07a6757ffa531aab91e874e234c3597ee2509142bcd65ae98d4d3c7d1ab70b1bad3e570655fb3b37723656641c3e0a976e7f