18e658ec363968bf44dd6fcc8fb015a34441c346b8c196d0ae320173d48b98d0

Analysis

max time kernel
19s
max time network
35s
platform
windows7_x64
resource
win7-20230220-es
resource tags

arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
submitted
16-06-2023 23:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Set-up32Х64bit.exe
Size

906.0MB
MD5

4e3fcd320f3c09ce853af113918939d5
SHA1

de2cb6ccbf2d91b5ffdd1091bab5ec20bb90aa2b
SHA256

18e658ec363968bf44dd6fcc8fb015a34441c346b8c196d0ae320173d48b98d0
SHA512

2f1cd98e4b822acacde9499b89cb0ca194eaee3deb8e1a8c1028d70811356c5ded156966b50c4aeb2489b88c2f88469fdb26a52e6f1920f8cdd38b8abc190ae7
SSDEEP

98304:x0A+OS/5mKctYIWOcNZE5JJKqEDkwhrrm5jMtunv:x0A05zH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
928	Set-up32Х64bit.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	928	Set-up32Х64bit.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 928 wrote to memory of 2024	928	Set-up32Х64bit.exe	28
PID 928 wrote to memory of 2024	928	Set-up32Х64bit.exe	28
PID 928 wrote to memory of 2024	928	Set-up32Х64bit.exe	28
PID 928 wrote to memory of 2024	928	Set-up32Х64bit.exe	28

C:\Users\Admin\AppData\Local\Temp\Set-up32Х64bit.exe
"C:\Users\Admin\AppData\Local\Temp\Set-up32Х64bit.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:928
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
  2⤵
  PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/928-54-0x0000000000F20000-0x00000000010B2000-memory.dmp

Filesize
1.6MB

Download
memory/928-55-0x00000000003A0000-0x000000000042C000-memory.dmp

Filesize
560KB

Download
memory/928-56-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-57-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-59-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-61-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-63-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-65-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-67-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-73-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-71-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-69-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-77-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-75-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-81-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-79-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-85-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-83-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-89-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-91-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-87-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-95-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-93-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-97-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-99-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-101-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-105-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-107-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-103-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-111-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-109-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-115-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-113-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-117-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download
memory/928-119-0x00000000003A0000-0x0000000000427000-memory.dmp

Filesize
540KB

Download