fd345fbb6db8341dfb1e98718a198f114ddb5a32588d1f2547fa8e54965ac268

Analysis

max time kernel
141s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2023, 17:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

output.exe
Size

5.7MB
MD5

2afaf6ddf00e47474b6a1265a08fd138
SHA1

cbc7a855cac03a2232a06561c2a84b78e11d585b
SHA256

fd345fbb6db8341dfb1e98718a198f114ddb5a32588d1f2547fa8e54965ac268
SHA512

81ba72a1cc43c9cf538a41ca6162abafc0ac5ad27ad1b9f5ecdf6be5288b0fa1c64134b8dc3cb0fe6655675918f99529b5a69366d3daac383f88ca344155175f
SSDEEP

98304:AJS3eHIzb71QGQCPDbZfzuOqV6l7ayCb7BJ5mjwNwwMeZYobSr+en3QACLqH5:A0awdQmRrdA6l7aycBIGpEoKn3Q1Lk

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
5092	output.exe
5092	output.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1536 wrote to memory of 5092	1536	output.exe	87
PID 1536 wrote to memory of 5092	1536	output.exe	87

C:\Users\Admin\AppData\Local\Temp\output.exe
"C:\Users\Admin\AppData\Local\Temp\output.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1536
- C:\Users\Admin\AppData\Local\Temp\output.exe
  "C:\Users\Admin\AppData\Local\Temp\output.exe"
  2⤵
  - Loads dropped DLL
  PID:5092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI15362\VCRUNTIME140.dll

Filesize
106KB

MD5
870fea4e961e2fbd00110d3783e529be

SHA1
a948e65c6f73d7da4ffde4e8533c098a00cc7311

SHA256
76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

SHA512
0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI15362\VCRUNTIME140.dll

Filesize
106KB

MD5
870fea4e961e2fbd00110d3783e529be

SHA1
a948e65c6f73d7da4ffde4e8533c098a00cc7311

SHA256
76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

SHA512
0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI15362\base_library.zip

Filesize
1.0MB

MD5
5fa75f78c623be7a80d9e91d4f0d2a26

SHA1
d479e529a7a4700872c1bf9dfbd3f6c807f239de

SHA256
24696a9c6751ec6c10f14e8c4e48d5596c88a8d13e808bdabdca94ea28bb6951

SHA512
d28ba73dfcd61b49914a527766ece104ea92230e52e701724402f0af518c228830c099641366bef846dcd5ab21a703b4a66e5a0db2abf94d16186642eadf0fc3

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI15362\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI15362\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads