Analysis
-
max time kernel
151s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230621-en -
resource tags
-
submitted
26/06/2023, 20:02
General
-
Target
tsetup-x64.3.2.5.exe
-
Size
33.2MB
-
MD5
8d5829f6435febc09706e697e50e0d62
-
SHA1
37e22e0609d1e1fe3c06e96c00f069f5c0f400ca
-
SHA256
f61966d3b08bd8be20ab4cbf69e737d188e3822d1d65a15df720e188a14f9412
-
SHA512
b963180946e6f177662b1d903db096aaa1fe0645c440f74c183af981544eeac59d45deeb444d00a6d7df1030b247708bd5dc77e9f8fca4496afa26cc0461b82b
-
SSDEEP
786432:+axK6PeQv1VOIPFQLPm55zkt8uGVrHbrhsf+:9o6RviRrEkt5G1Hbr
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tsetup-x64.3.2.5.exe"C:\Users\Admin\AppData\Local\Temp\tsetup-x64.3.2.5.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-UQ7QL.tmp\tsetup-x64.3.2.5.tmp"C:\Users\Admin\AppData\Local\Temp\is-UQ7QL.tmp\tsetup-x64.3.2.5.tmp" /SL5="$70126,33954929,813568,C:\Users\Admin\AppData\Local\Temp\tsetup-x64.3.2.5.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
MD5b50ce51b38bdde2cdef4009421f5795c
SHA1a51590ae61fdd030aa15696bed94e606f37f773c
SHA256a3b8d81f09c7075d34f7819d2cc2f0fbf6468273a27c7120b3946657baa232b2
SHA51213bd385c7603416eeafb56ad13db394df9948166c46a58bd9423fa2629e1cb31584cb3ec00ca572c53eb949681086aa5744dd78d91ddb9baa3fade3af0f61071
-
Filesize
2.9MB
MD5b50ce51b38bdde2cdef4009421f5795c
SHA1a51590ae61fdd030aa15696bed94e606f37f773c
SHA256a3b8d81f09c7075d34f7819d2cc2f0fbf6468273a27c7120b3946657baa232b2
SHA51213bd385c7603416eeafb56ad13db394df9948166c46a58bd9423fa2629e1cb31584cb3ec00ca572c53eb949681086aa5744dd78d91ddb9baa3fade3af0f61071
-
Filesize
4KB
-
Filesize
3.0MB
-
Filesize
4KB
-
Filesize
848KB
-
Filesize
848KB