Overview

overview

7

Static

static

windowfx21...US.exe

windows7-x64

7

windowfx21...US.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    209s
  • max time network
    229s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-01-2023 19:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    windowfx212_public_US.exe

  • Size

    1.0MB

  • MD5

    4f19867673907db2ddd8a756418cb1d9

  • SHA1

    27a7ecad8ec7abe82c378d6d3feee9768f314d71

  • SHA256

    42759cfd08d45fb6169f07c8ce2856417e6e9cd128f0667171ee50497f693fce

  • SHA512

    30cb8422635a6e133b9b192ef300b47e974edcfd7dda2c66ef87c74eeb7301d13ce1454b38c8675a706ae1a2a7c2241105a4cea414af68b9fcee1d03cf5fc9e9

  • SSDEEP

    24576:x9a5JsODuAZ/FJVv/OCWG2D2RG6XV3O9nSC3wduwZ:x675tPnquJO9V3CrZ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\windowfx212_public_US.exe
    "C:\Users\Admin\AppData\Local\Temp\windowfx212_public_US.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GLC9153.tmp
    Filesize

    157KB

    MD5

    fbd929bfc7b4a9e4fa4506655bab4c4a

    SHA1

    b4df84de80729a04ed90dc976a3e730a568f24f8

    SHA256

    adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4

    SHA512

    b310e79848dc2a3c6a4524e0b120e2e3dd73ecb6852c65a9eec368045f7bab0b141210726476dd3cb0c1d9008e1f34149f35c03a0156a9eef7d4a7fbc61ea1b4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLKCF86.tmp
    Filesize

    30KB

    MD5

    3df61e5730883b2d338addd7acbe4bc4

    SHA1

    03166e6230231e7e3583cf9c8944f4967aa1bf1b

    SHA256

    2efe9a54c8eb878711d9b6cd18f276838645aff52fe69d8a864376cb258ec616

    SHA512

    36e9d705d22dad3d952b4da578a990f2b63ec2f9fbf2734efdaea9ecbd4f07a8d7232792eb5bdd81c553354d51334993cb6103c377f3483a680eac9e41cd2087

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLKCF86.tmp
    Filesize

    30KB

    MD5

    3df61e5730883b2d338addd7acbe4bc4

    SHA1

    03166e6230231e7e3583cf9c8944f4967aa1bf1b

    SHA256

    2efe9a54c8eb878711d9b6cd18f276838645aff52fe69d8a864376cb258ec616

    SHA512

    36e9d705d22dad3d952b4da578a990f2b63ec2f9fbf2734efdaea9ecbd4f07a8d7232792eb5bdd81c553354d51334993cb6103c377f3483a680eac9e41cd2087

    Download Submit

  • memory/2300-135-0x0000000002221000-0x0000000002223000-memory.dmp

    Filesize

    8KB

    Download