Analysis

  • max time kernel
    140s
  • max time network
    174s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 09:49

General

  • Target

    CryptoObfuscator/CryptoObfuscator.exe

  • Size

    13.2MB

  • MD5

    9b3604701295001c27febda4ede73773

  • SHA1

    25ce96ee0ca0002f49b8541036568a20b1cd273d

  • SHA256

    aec6c22c784989b03b7dc6c11e0bf6ab4d64e09f25823b60c1d62be551c223b4

  • SHA512

    652eb8869fed99b32414e818a1be04786c003359ce6d425e56e0eb254fab0cc91b27278da2579c12300f26602e3b0d5ec3d0f905eb8adb58d6e98c57c817d2f1

  • SSDEEP

    393216:RqaA3LtpfnVkUcmwH0hr528lRMCpYRG8:LA3Lnfnmgrs8lmAYG

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 34 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CryptoObfuscator\CryptoObfuscator.exe
    "C:\Users\Admin\AppData\Local\Temp\CryptoObfuscator\CryptoObfuscator.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\SkinSoft\VisualStyler\2.4.0.0\x64\ssapihook.dll

    Filesize

    67KB

    MD5

    8b003c3f98f8d08968ac5d3c1cc90a60

    SHA1

    68f8d418638a81839a2ad665909916cda8efe625

    SHA256

    d52a9c53f510237a194211aa3dc7d0f22f80fcc0593d9d77e0827ba6681b47e9

    SHA512

    429e97c74b8e45a43d09618972f04ba46a8075867a631543eb7b7cbbb55a719cbe2e0412f3b63b989741e3807d733b2a6f3ecb735278adc5e734e18e297c4015

  • memory/2952-21-0x00007FFE52500000-0x00007FFE52501000-memory.dmp

    Filesize

    4KB

  • memory/2952-0-0x0000000000D30000-0x0000000001A5C000-memory.dmp

    Filesize

    13.2MB

  • memory/2952-3-0x000000001C650000-0x000000001C734000-memory.dmp

    Filesize

    912KB

  • memory/2952-4-0x000000001C9D0000-0x000000001CA5E000-memory.dmp

    Filesize

    568KB

  • memory/2952-5-0x0000000003BD0000-0x0000000003BD8000-memory.dmp

    Filesize

    32KB

  • memory/2952-6-0x000000001C8B0000-0x000000001C9B2000-memory.dmp

    Filesize

    1.0MB

  • memory/2952-7-0x000000001D650000-0x000000001DC10000-memory.dmp

    Filesize

    5.8MB

  • memory/2952-8-0x000000001DC10000-0x000000001E230000-memory.dmp

    Filesize

    6.1MB

  • memory/2952-9-0x000000001E330000-0x000000001ED8C000-memory.dmp

    Filesize

    10.4MB

  • memory/2952-10-0x000000001ED90000-0x000000001EDBE000-memory.dmp

    Filesize

    184KB

  • memory/2952-11-0x0000000003C00000-0x0000000003C08000-memory.dmp

    Filesize

    32KB

  • memory/2952-1-0x00007FFEB3F80000-0x00007FFEB4A41000-memory.dmp

    Filesize

    10.8MB

  • memory/2952-16-0x00007FFE52470000-0x00007FFE52471000-memory.dmp

    Filesize

    4KB

  • memory/2952-17-0x00007FFE52460000-0x00007FFE52461000-memory.dmp

    Filesize

    4KB

  • memory/2952-18-0x00007FFE50CB0000-0x00007FFE50CB1000-memory.dmp

    Filesize

    4KB

  • memory/2952-19-0x00007FFE52480000-0x00007FFE52481000-memory.dmp

    Filesize

    4KB

  • memory/2952-2-0x000000001C7A0000-0x000000001C7B0000-memory.dmp

    Filesize

    64KB

  • memory/2952-20-0x00007FFE52490000-0x00007FFE52491000-memory.dmp

    Filesize

    4KB

  • memory/2952-22-0x00007FFE524A0000-0x00007FFE524A1000-memory.dmp

    Filesize

    4KB

  • memory/2952-23-0x00007FFE524B0000-0x00007FFE524B1000-memory.dmp

    Filesize

    4KB

  • memory/2952-24-0x00007FFE524D0000-0x00007FFE524D1000-memory.dmp

    Filesize

    4KB

  • memory/2952-25-0x00007FFE524E0000-0x00007FFE524E1000-memory.dmp

    Filesize

    4KB

  • memory/2952-26-0x00007FFE524C0000-0x00007FFE524C1000-memory.dmp

    Filesize

    4KB

  • memory/2952-27-0x00007FFE524F0000-0x00007FFE524F1000-memory.dmp

    Filesize

    4KB

  • memory/2952-28-0x00007FFE52510000-0x00007FFE52511000-memory.dmp

    Filesize

    4KB

  • memory/2952-29-0x00007FFE4E2F0000-0x00007FFE4E2F1000-memory.dmp

    Filesize

    4KB

  • memory/2952-30-0x00007FFE4E340000-0x00007FFE4E341000-memory.dmp

    Filesize

    4KB

  • memory/2952-31-0x00007FFE4E300000-0x00007FFE4E301000-memory.dmp

    Filesize

    4KB

  • memory/2952-32-0x00007FFE4E350000-0x00007FFE4E351000-memory.dmp

    Filesize

    4KB

  • memory/2952-33-0x000000001C7A0000-0x000000001C7B0000-memory.dmp

    Filesize

    64KB

  • memory/2952-34-0x000000001C7A0000-0x000000001C7B0000-memory.dmp

    Filesize

    64KB

  • memory/2952-35-0x00007FFEB3F80000-0x00007FFEB4A41000-memory.dmp

    Filesize

    10.8MB

  • memory/2952-36-0x000000001C7A0000-0x000000001C7B0000-memory.dmp

    Filesize

    64KB

  • memory/2952-37-0x000000001C7A0000-0x000000001C7B0000-memory.dmp

    Filesize

    64KB

  • memory/2952-38-0x000000001C7A0000-0x000000001C7B0000-memory.dmp

    Filesize

    64KB