Analysis

  • max time kernel
    151s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2023, 18:51

General

  • Target

    2d5817011b87aa58aea2877da9a16137.exe

  • Size

    734KB

  • MD5

    2d5817011b87aa58aea2877da9a16137

  • SHA1

    e2a206242507b12e955bf09981ac739b2b2d940a

  • SHA256

    287407c03e7733c974b34b38f2112beb37209e73b965db2c7e6c250b38d12efb

  • SHA512

    cbd961033ef5891eeadf696644148ec1c7883074eb7d9074506df6a3b8a35a3687db2dc9b0b73ce5d6a60164dfdaa992b54f56b41c7a450f128b29d625651275

  • SSDEEP

    12288:zPDiJJG05qrVujzjkv45nG2JoGhkgGt4z9iqCb4jyKrxo6EbpYx0:rmb3GVsfkv4I2Wi0t4+4jPG6Eb

Score
10/10

Malware Config

Signatures

  • Nosu

    Nosu is an info stealer written in C++ first seen in late 2022.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d5817011b87aa58aea2877da9a16137.exe
    "C:\Users\Admin\AppData\Local\Temp\2d5817011b87aa58aea2877da9a16137.exe"
    1⤵
      PID:1256

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1256-54-0x0000000000220000-0x0000000000221000-memory.dmp

            Filesize

            4KB

          • memory/1256-55-0x00000000005B0000-0x00000000005F9000-memory.dmp

            Filesize

            292KB

          • memory/1256-56-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-57-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-58-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-59-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-60-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-61-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-62-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-63-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-64-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-65-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-66-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-67-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-69-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB

          • memory/1256-70-0x0000000000400000-0x00000000004BD000-memory.dmp

            Filesize

            756KB