bc9b8cf8152e01d5bb605de7219cb6713b0201931c53dd9a0011dfce13b030d2

Resubmissions

21/08/2023, 16:18

230821-tr7rnafg61 7

21/08/2023, 16:16

230821-trbdfseb79 3

Analysis

max time kernel
142s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
21/08/2023, 16:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Monocypher_AEAD_explorer.exe
Size

6.7MB
MD5

aecfc65a79d33a1b8624f53206c38978
SHA1

0754262ac951f9a0db82b13b2d9f26caee5ed11b
SHA256

a14ceeea285ea58a8d02fb14611238c1ee2299fd1e0971bf5305f24a6189f5fd
SHA512

3e295ac262326c5cb6452f0a0e918f4becf0c0ff55cfc3a9167662febed4733b75cfe9c2fe50691ac43baf2834371e84b72971f11ddc3bb894e666bae2029c2f
SSDEEP

196608:kZNoqdQmRrdA6lfuErSEEJwdF6ZtYPQki:Q9dQOlf+9JZtt

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
3228	Monocypher_AEAD_explorer.exe
3228	Monocypher_AEAD_explorer.exe
3228	Monocypher_AEAD_explorer.exe
3228	Monocypher_AEAD_explorer.exe
3228	Monocypher_AEAD_explorer.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3128 wrote to memory of 3228	3128	Monocypher_AEAD_explorer.exe	83
PID 3128 wrote to memory of 3228	3128	Monocypher_AEAD_explorer.exe	83

C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe
"C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3128
- C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe
  "C:\Users\Admin\AppData\Local\Temp\Monocypher_AEAD_explorer.exe"
  2⤵
  - Loads dropped DLL
  PID:3228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI31282\VCRUNTIME140.dll

Filesize
106KB

MD5
870fea4e961e2fbd00110d3783e529be

SHA1
a948e65c6f73d7da4ffde4e8533c098a00cc7311

SHA256
76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

SHA512
0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\VCRUNTIME140.dll

Filesize
106KB

MD5
870fea4e961e2fbd00110d3783e529be

SHA1
a948e65c6f73d7da4ffde4e8533c098a00cc7311

SHA256
76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

SHA512
0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\_hashlib.pyd

Filesize
62KB

MD5
f419ac6e11b4138eea1fe8c86689076a

SHA1
886cda33fa3a4c232caa0fa048a08380971e8939

SHA256
441d32922122e59f75a728cc818f8e50613866a6c3dec627098e6cc6c53624e2

SHA512
6b5aa5f5fbc00fb48f49b441801ee3f3214bd07382444569f089efb02a93ce907f6f4e0df281bda81c80f2d6a247b0adc7c2384a2e484bc7ef43b43c84756d2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\_hashlib.pyd

Filesize
62KB

MD5
f419ac6e11b4138eea1fe8c86689076a

SHA1
886cda33fa3a4c232caa0fa048a08380971e8939

SHA256
441d32922122e59f75a728cc818f8e50613866a6c3dec627098e6cc6c53624e2

SHA512
6b5aa5f5fbc00fb48f49b441801ee3f3214bd07382444569f089efb02a93ce907f6f4e0df281bda81c80f2d6a247b0adc7c2384a2e484bc7ef43b43c84756d2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\base_library.zip

Filesize
1.7MB

MD5
e9c28bc7ae0276a2413d913fabe101cc

SHA1
baefb0b00eac192113737106bc76b02244c17838

SHA256
7ecd1dfe0dcc82c2e595729cb238acb890326adc87136334ce9c21a5f0c847bf

SHA512
c25532849462e0dc1e3e7fd5f0dcc93a5dc18c7b29920819143ec30fec899f98cb8a538ab0084b9ba91f62705de3dededef6acfae02daf1efceabac3819804e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\libcrypto-1_1.dll

Filesize
3.3MB

MD5
6f4b8eb45a965372156086201207c81f

SHA1
8278f9539463f0a45009287f0516098cb7a15406

SHA256
976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541

SHA512
2c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\libcrypto-1_1.dll

Filesize
3.3MB

MD5
6f4b8eb45a965372156086201207c81f

SHA1
8278f9539463f0a45009287f0516098cb7a15406

SHA256
976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541

SHA512
2c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\monocypher.cp311-win_amd64.pyd

Filesize
136KB

MD5
4de0f5418f9e6a581007e624407558bc

SHA1
45dc40804123d593435577adb01b02724cd121da

SHA256
a18888ee032f0044a4e9e99d0d625bee8a62f5aff11d4ab568f37088d28c7c3e

SHA512
e8fcccdd11e77cf806f309343ab2224b84260ebf71ff3deb93b0544bcf0c2867c4a9270d4b2c41bc2e880317a37240a4e6f3acea7507338d65c3789418d7283f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\monocypher.cp311-win_amd64.pyd

Filesize
136KB

MD5
4de0f5418f9e6a581007e624407558bc

SHA1
45dc40804123d593435577adb01b02724cd121da

SHA256
a18888ee032f0044a4e9e99d0d625bee8a62f5aff11d4ab568f37088d28c7c3e

SHA512
e8fcccdd11e77cf806f309343ab2224b84260ebf71ff3deb93b0544bcf0c2867c4a9270d4b2c41bc2e880317a37240a4e6f3acea7507338d65c3789418d7283f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\python311.dll

Filesize
5.5MB

MD5
a72993488cecd88b3e19487d646f88f6

SHA1
5d359f4121e0be04a483f9ad1d8203ffc958f9a0

SHA256
aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

SHA512
c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI31282\python311.dll

Filesize
5.5MB

MD5
a72993488cecd88b3e19487d646f88f6

SHA1
5d359f4121e0be04a483f9ad1d8203ffc958f9a0

SHA256
aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

SHA512
c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads