Overview

overview

7

Static

static

85efa26b41...4c.exe

windows7-x64

7

85efa26b41...4c.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    144s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2022, 18:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c.exe

  • Size

    7.4MB

  • MD5

    5c99e95380940e99784014bcdf79c638

  • SHA1

    b526ee48f1fd30a92b06d856f155d9be224cc6d8

  • SHA256

    85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c

  • SHA512

    57c5698356b1238ddb9931afb031d03dc22ea5074f57e3497b8813576d4713c14d8e735b494a3ac2c1005739f3f17965a99a091e6a8687842656cebe7d36e199

  • SSDEEP

    196608:RlXA+HpoXcsrE9ZUtrZqvZWjFz924xUKW:R1JoGXiZsZY924qn

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c.exe
    "C:\Users\Admin\AppData\Local\Temp\85efa26b41d772af3c4a56d8f155c1e268d049f1906a5bcf748d33994437f84c.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:5064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GLC768C.tmp
    Filesize

    161KB

    MD5

    8c97d8bb1470c6498e47b12c5a03ce39

    SHA1

    15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7

    SHA256

    a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a

    SHA512

    7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLK78C1.tmp
    Filesize

    33KB

    MD5

    07631941f67818659e0e97932224886f

    SHA1

    a5fa37d427480b569fa858ec66cca2a85d35a40d

    SHA256

    d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

    SHA512

    fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLK78C1.tmp
    Filesize

    33KB

    MD5

    07631941f67818659e0e97932224886f

    SHA1

    a5fa37d427480b569fa858ec66cca2a85d35a40d

    SHA256

    d73170ea2688da5f6f37d4ca70b72dbc061abd47615269968563b5fcbd74dd9c

    SHA512

    fbd217add3e1897281de80e2bd935b1251812744264fc5c9a77e88615c18d97a3c01d4f75165d80f3a067369b9e679500e836ec39fafc11d5a40b0054e83d510

    Download Submit

  • memory/5064-135-0x0000000002261000-0x0000000002263000-memory.dmp

    Filesize

    8KB

    Download