Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    19-04-2023 15:56

General

  • Target

    10zMmJymWmtUAeXFkaKSMaTCUb.exe

  • Size

    3.9MB

  • MD5

    d0d866d87eb0bfb105ccd0b7ca05da8a

  • SHA1

    e8692ae3e436c3d40945758eb10f9ab88b1e3b80

  • SHA256

    eaa884c44f7c442c78f551614f77cb97aec2dd5f568858e52b0e45a45a01f9d8

  • SHA512

    a2c608c6287c0378dd7db7759a0428812779f01ba7baa6173eb5a52e62c92735b61c4b69e517b641dcfeea6a4addcbb292b6a34c811bce2816a75d36e37ce9d4

  • SSDEEP

    98304:yNuSZTKA0t9FFPE0YVrsk9N8ivyhAdsPSQxv1xfnqUDJFPES3:ebk9fcHVN8iNIS6nqU78S3

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\10zMmJymWmtUAeXFkaKSMaTCUb.exe
    "C:\Users\Admin\AppData\Local\Temp\10zMmJymWmtUAeXFkaKSMaTCUb.exe"
    1⤵
    • Loads dropped DLL
    PID:1052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Costura\D214600BACFC03C316152CFBDF386861\32\system.data.sqlite.dll

    Filesize

    1.5MB

    MD5

    e4ccec3231a86a58a869c34cd871b5b4

    SHA1

    8affd1f8a5ecde58d5be5bd97667df8326facc1a

    SHA256

    09b4a1ddc892cf78fedf82e23a7e3d0da2ab048da692f9316199d05059569041

    SHA512

    8b0d17bed123d9b6e3e8d6dc5e42eeec7eb9e058bcb6fadabf8fa178d96602823194cbf5524c6cf7c7e868ce4b729430a9fee7352ac1b55d635a2b1b60baa327

  • \Users\Admin\AppData\Local\Temp\Costura\D214600BACFC03C316152CFBDF386861\32\system.data.sqlite.dll

    Filesize

    1.5MB

    MD5

    e4ccec3231a86a58a869c34cd871b5b4

    SHA1

    8affd1f8a5ecde58d5be5bd97667df8326facc1a

    SHA256

    09b4a1ddc892cf78fedf82e23a7e3d0da2ab048da692f9316199d05059569041

    SHA512

    8b0d17bed123d9b6e3e8d6dc5e42eeec7eb9e058bcb6fadabf8fa178d96602823194cbf5524c6cf7c7e868ce4b729430a9fee7352ac1b55d635a2b1b60baa327

  • memory/1052-54-0x0000000000B80000-0x0000000000F6C000-memory.dmp

    Filesize

    3.9MB

  • memory/1052-63-0x0000000004AD0000-0x0000000004B10000-memory.dmp

    Filesize

    256KB

  • memory/1052-76-0x0000000004AD0000-0x0000000004B10000-memory.dmp

    Filesize

    256KB