Overview

overview

7

Static

static

Setup.exe

windows7-x64

7

Setup.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    19s
  • max time network
    27s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/01/2023, 19:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Setup.exe

  • Size

    33.9MB

  • MD5

    b94a2f3d43c028234a98bf80ff246815

  • SHA1

    182f4ff86e080debe3ffbb09c391470282f38a63

  • SHA256

    b5ec4b547baff2595a53ce00928bca07a79b88300c9c00e7ecf5b09e4b0c8963

  • SHA512

    a711102d82e0b56755f3f4cb50a9a35b36c9ae78efe30ab3238c81c1b08cf290ce99f82c1ff0e0a53b1b107bbac7861298b69e04dbcf8e65281b657e3bc815f2

  • SSDEEP

    786432:2iuRThVtKWsSjywTM6LFIcfhbxNfb5f796F450ThcnVpGXaqgmxwX:ZuDjKSjdTM4FIcfhbj5fpwY0dcnbGX9Y

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GLCD527.tmp
    Filesize

    161KB

    MD5

    09e59d00df5d2effd8dd9b30385cb9d2

    SHA1

    0fa0d3f6692f31fdabefb719b0f7a28cbf5d5415

    SHA256

    1c574eab5e83ccfe5a0bb7b59e028cc5fa2f4e77868051e305d83c709711ff77

    SHA512

    d73e3832777341a4176dbd9988002ec94a32f162492e869a8c03d9bb10f1833821f99e15710e9fc103a2820c862cf14a0b990d7c7c09150bb14618a7c93ca5fd

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLFD9DE.tmp
    Filesize

    10KB

    MD5

    9da8f742593d4bbca708b90725282ae2

    SHA1

    9aaa6ed98726e657252a098f2bf06066a8604d27

    SHA256

    e362a9815527869e0f71fdf766a1c3648e307145defda7a5279914e522bcb57c

    SHA512

    f8b4129dc4ab30e009cb4db8a80f06b16306c1a90a49e534befb925d6ce4d5713b98553a2107b40efa8b5abd025ff0556976cf46c3642ce8e372c34d105e36cb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLFD9DE.tmp
    Filesize

    10KB

    MD5

    9da8f742593d4bbca708b90725282ae2

    SHA1

    9aaa6ed98726e657252a098f2bf06066a8604d27

    SHA256

    e362a9815527869e0f71fdf766a1c3648e307145defda7a5279914e522bcb57c

    SHA512

    f8b4129dc4ab30e009cb4db8a80f06b16306c1a90a49e534befb925d6ce4d5713b98553a2107b40efa8b5abd025ff0556976cf46c3642ce8e372c34d105e36cb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLKD567.tmp
    Filesize

    33KB

    MD5

    517419cae37f6c78c80f9b7d0fbb8661

    SHA1

    a9e419f3d9ef589522556e0920c84fe37a548873

    SHA256

    bfe7e013cfb85e78b994d3ad34eca08286494a835cb85f1d7bced3df6fe93a11

    SHA512

    5046565443cf463b6fa4d2d5868879efc6a9db969bf05e3c80725b99bd091ce062cfe66c5551eb1cc5f00a38f2cfcda1f36fb4d60d9ff816c4ec3107b5a0df40

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\GLKD567.tmp
    Filesize

    33KB

    MD5

    517419cae37f6c78c80f9b7d0fbb8661

    SHA1

    a9e419f3d9ef589522556e0920c84fe37a548873

    SHA256

    bfe7e013cfb85e78b994d3ad34eca08286494a835cb85f1d7bced3df6fe93a11

    SHA512

    5046565443cf463b6fa4d2d5868879efc6a9db969bf05e3c80725b99bd091ce062cfe66c5551eb1cc5f00a38f2cfcda1f36fb4d60d9ff816c4ec3107b5a0df40

    Download Submit

  • memory/2680-135-0x0000000000841000-0x0000000000843000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2680-138-0x0000000000871000-0x0000000000873000-memory.dmp

    Filesize

    8KB

    Download