Overview

overview

7

Static

static

85efa26b41...4c.exe

windows7-x64

7

85efa26b41...4c.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    45s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2022, 18:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c.exe

  • Size

    7.4MB

  • MD5

    5c99e95380940e99784014bcdf79c638

  • SHA1

    b526ee48f1fd30a92b06d856f155d9be224cc6d8

  • SHA256

    85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c

  • SHA512

    57c5698356b1238ddb9931afb031d03dc22ea5074f57e3497b8813576d4713c14d8e735b494a3ac2c1005739f3f17965a99a091e6a8687842656cebe7d36e199

  • SSDEEP

    196608:RlXA+HpoXcsrE9ZUtrZqvZWjFz924xUKW:R1JoGXiZsZY924qn

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c.exe
    "C:\Users\Admin\AppData\Local\Temp\85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:1200

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\GLC1A45.tmp
          Filesize

          161KB

          MD5

          8c97d8bb1470c6498e47b12c5a03ce39

          SHA1

          15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7

          SHA256

          a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a

          SHA512

          7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f

          Download Submit

        • \Users\Admin\AppData\Local\Temp\GLK1D82.tmp
          Filesize

          33KB

          MD5

          07631941f67818659e0e97932224886f

          SHA1

          a5fa37d427480b569fa858ec66cca2a85d35a40d

          SHA256

          d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

          SHA512

          fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

          Download Submit

        • memory/1200-54-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

          Filesize

          8KB

          Download