Analysis

  • max time kernel
    152s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    10-03-2023 22:38

General

  • Target

    Installer.exe

  • Size

    333.8MB

  • MD5

    b1f58134ac53c88c1b11382509e40178

  • SHA1

    ce7b72a5034c02fd48ed96c17486c0df53c01909

  • SHA256

    fa8971cb8ce905708c27d9fb1fc8926ec6e0aa45c003964d19b406fc2c90d758

  • SHA512

    9cb8924bacf094703baecafd36b9890896905da08a47fb43b258b1da8e7ab9e9369e02c3f2cde5d70bddab36f96790b1b893cb43f17df03176680ceab9e38e6c

  • SSDEEP

    98304:oLp0wdgYLHxUNneCC3eDkWRXpjlgDB6JU3N:+p0wdgYLHxUNnBJkokd

Score
10/10

Malware Config

Signatures

  • Aurora

    Aurora is a crypto wallet stealer written in Golang.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Installer.exe"
    1⤵
      PID:1700

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1700-54-0x0000000000BA0000-0x0000000001394000-memory.dmp
      Filesize

      8.0MB

    • memory/1700-55-0x000000001B760000-0x000000001B828000-memory.dmp
      Filesize

      800KB

    • memory/1700-56-0x000000001B6E0000-0x000000001B760000-memory.dmp
      Filesize

      512KB

    • memory/1700-57-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-58-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-60-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-62-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-64-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-66-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-68-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-70-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-72-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-74-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-76-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-78-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-80-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-82-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-84-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-86-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-88-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-90-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-92-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-94-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-96-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-98-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-100-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-102-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-104-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-106-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-108-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-110-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-112-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-114-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-116-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-118-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-120-0x000000001B760000-0x000000001B823000-memory.dmp
      Filesize

      780KB

    • memory/1700-153-0x000000001B6E0000-0x000000001B760000-memory.dmp
      Filesize

      512KB