Overview

overview

7

Static

static

3

tenki.exe

windows7-x64

7

tenki.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    112s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/06/2023, 14:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tenki.exe
  • Size 6.7MB
  • Sample230629-rseq6adc73
  • SHA256 a76216049cbe6154855a8bdec8c3a3d267cd367e3bebffffc367218c8aeabaae
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tenki.exe
    "C:\Users\Admin\AppData\Local\Temp\tenki.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3624
    • C:\Users\Admin\AppData\Local\Temp\tenki.exe
      "C:\Users\Admin\AppData\Local\Temp\tenki.exe"
      2⤵
      • Loads dropped DLL
      PID:1340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_hashlib.pyd
        • Size 63KB
        • SHA256 e557873d5ad59fd6bd29d0f801ad0651dbb8d9ac21545defe508089e92a15e29
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_hashlib.pyd
        • Size 63KB
        • SHA256 e557873d5ad59fd6bd29d0f801ad0651dbb8d9ac21545defe508089e92a15e29
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_socket.pyd
        • Size 77KB
        • SHA256 74181072392a3727049ea3681fe9e59516373809ced53e08f6da7c496b76e117
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_socket.pyd
        • Size 77KB
        • SHA256 74181072392a3727049ea3681fe9e59516373809ced53e08f6da7c496b76e117
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\base_library.zip
        • Size 1.8MB
        • SHA256 ff6a37c49ee4bb07a763866d4163126165038296c1fb7b730928297c25cfbe6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 f20eb4efd8647b5273fdaafceb8ccb2b8ba5329665878e01986cbfc1e6832c44
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 f20eb4efd8647b5273fdaafceb8ccb2b8ba5329665878e01986cbfc1e6832c44
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\python311.dll
        • Size 5.5MB
        • SHA256 a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\python311.dll
        • Size 5.5MB
        • SHA256 a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\select.pyd
        • Size 29KB
        • SHA256 c4aa9a106381835cfb5f9badfb9d77df74338bc66e69183757a5a3774ccdaccf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\select.pyd
        • Size 29KB
        • SHA256 c4aa9a106381835cfb5f9badfb9d77df74338bc66e69183757a5a3774ccdaccf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download