4423693e8b8a26a3096c64522b0eb2d8b24845f1737ad98879cdc301c8f5ed01

Analysis

max time kernel
141s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
28/09/2023, 19:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

PREREQUISITES/Silverlight_x64.exe
Size

12.6MB
MD5

4dde36bf591d7aa0b05497afd40ac2cc
SHA1

ad8db31020463e825c0b620d93477b5321c072d8
SHA256

8d263a6f42a378073b6f057f242a42076f9f4082340153c2e27ecc959c5036aa
SHA512

7a525b78e803a816fa653f4afabde625dd430294fbaac387408591e3c65a122c8c2de1fd65ceaa4e16b44eba97afdf90b233f4e4e169f204c029586f28f45e20
SSDEEP

393216:YwpygvheTgJ/+wP8Ut8ufz/XaAuJdWFJ3+bl:Jsgv4w8U6U/KNzWqbl

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4052	install.exe

Loads dropped DLL 2 IoCs

pid	Process
4052	install.exe
4052	install.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 4052	1988	Silverlight_x64.exe	86
PID 1988 wrote to memory of 4052	1988	Silverlight_x64.exe	86

C:\Users\Admin\AppData\Local\Temp\PREREQUISITES\Silverlight_x64.exe
"C:\Users\Admin\AppData\Local\Temp\PREREQUISITES\Silverlight_x64.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1988
- \??\c:\0708ce3bc8d2670b5e8494f7bb15f037\install.exe
  c:\0708ce3bc8d2670b5e8494f7bb15f037\install.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\0708ce3bc8d2670b5e8494f7bb15f037\install.exe

Filesize
282KB

MD5
df0d5d37c2a2225148579486fa7043b7

SHA1
33a7d00a17f2cc9d78a48b927b5c23bb368b6097

SHA256
963f37570fee71bd9e86f592f86c898729446e2d18fa1f08d236b3f9cc4d31f3

SHA512
8218dccd60b47a9313d3642e89b1aa956183c0b9e7c8d1a4e5556c1804e009e839cae60cc5e2bbe7cfd62ccbe935bd0e683fff25ecd0a0571bc6df8c2295d7cb

Download Submit
C:\0708ce3bc8d2670b5e8494f7bb15f037\install.res.dll

Filesize
428KB

MD5
6a1bb0fa3a7ee1d0ed1291cb168e38f2

SHA1
28446ba2127050d1bd4ef635eaa106853fbfc74c

SHA256
a7a5283f564a2108a24f6180aae90d3800f7d49872a284c2ac9f8daa15bd33df

SHA512
eb8b1d88d07e079838a8b1aae7e4ddf6b3394cd8c5375541eeabd3a775a9eb451a26bca23aa8fe68b0c47e759075131c5b86181ff3f1d537a1a32c9ddc0373ab

Download Submit
C:\0708ce3bc8d2670b5e8494f7bb15f037\install.res.dll

Filesize
428KB

MD5
6a1bb0fa3a7ee1d0ed1291cb168e38f2

SHA1
28446ba2127050d1bd4ef635eaa106853fbfc74c

SHA256
a7a5283f564a2108a24f6180aae90d3800f7d49872a284c2ac9f8daa15bd33df

SHA512
eb8b1d88d07e079838a8b1aae7e4ddf6b3394cd8c5375541eeabd3a775a9eb451a26bca23aa8fe68b0c47e759075131c5b86181ff3f1d537a1a32c9ddc0373ab

Download Submit
\??\c:\0708ce3bc8d2670b5e8494f7bb15f037\install.exe

Filesize
282KB

MD5
df0d5d37c2a2225148579486fa7043b7

SHA1
33a7d00a17f2cc9d78a48b927b5c23bb368b6097

SHA256
963f37570fee71bd9e86f592f86c898729446e2d18fa1f08d236b3f9cc4d31f3

SHA512
8218dccd60b47a9313d3642e89b1aa956183c0b9e7c8d1a4e5556c1804e009e839cae60cc5e2bbe7cfd62ccbe935bd0e683fff25ecd0a0571bc6df8c2295d7cb

Download Submit
\??\c:\0708ce3bc8d2670b5e8494f7bb15f037\install.res.dll

Filesize
428KB

MD5
6a1bb0fa3a7ee1d0ed1291cb168e38f2

SHA1
28446ba2127050d1bd4ef635eaa106853fbfc74c

SHA256
a7a5283f564a2108a24f6180aae90d3800f7d49872a284c2ac9f8daa15bd33df

SHA512
eb8b1d88d07e079838a8b1aae7e4ddf6b3394cd8c5375541eeabd3a775a9eb451a26bca23aa8fe68b0c47e759075131c5b86181ff3f1d537a1a32c9ddc0373ab

Download Submit
memory/4052-11-0x00000000025A0000-0x00000000025A1000-memory.dmp

Filesize
4KB

Download
memory/4052-12-0x00000000025A0000-0x00000000025A1000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads