Analysis

  • max time kernel
    164s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2023, 21:19

General

  • Target

    Setupx64.exe

  • Size

    78.9MB

  • MD5

    a1dd3b7dc407ed1107aa60f4e4898a9f

  • SHA1

    185e673efdd8e4f9218929937c8e9ef879a1f296

  • SHA256

    8af4d97415893203ee0061709974dd6f30cb27e94423c94c64a1681208473ba9

  • SHA512

    0dda6b94ba35ffe8bc9792fb1274f9d0519e93ed3256eb2c33a44c00023d7011d930017a88487444c936d85afe6573320f3c45053f9df1717124c68bb4c670a2

  • SSDEEP

    1572864:i4hkyvIvpExQd4hGKSmOUrXVKFcHCAM2Zqc0wbUUgfwa:lqc0wbUUgH

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setupx64.exe
    "C:\Users\Admin\AppData\Local\Temp\Setupx64.exe"
    1⤵
    • Loads dropped DLL
    PID:60

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\.nexe_natives\win-dpapi\build\Release\node-dpapi.node

          Filesize

          1014KB

          MD5

          00cf816cf26f5a6a862c2cb05c385828

          SHA1

          e7ca2345d9e5d964976203727c1a6a5216e1a233

          SHA256

          0a74b075cc978ba78875749db7965045fc775e8fb6447d45fd21e1d13c8780c4

          SHA512

          3f8b4afa2397875daf8faf4e90e04f4980be0854d2f6284a4a33eb3305451762419f9355b190526402fb43f850ebab2618bc9d24de8889a86ffa2c64105cdb68

        • C:\Users\Admin\.nexe_natives\win-dpapi\build\Release\node-dpapi.node

          Filesize

          1014KB

          MD5

          00cf816cf26f5a6a862c2cb05c385828

          SHA1

          e7ca2345d9e5d964976203727c1a6a5216e1a233

          SHA256

          0a74b075cc978ba78875749db7965045fc775e8fb6447d45fd21e1d13c8780c4

          SHA512

          3f8b4afa2397875daf8faf4e90e04f4980be0854d2f6284a4a33eb3305451762419f9355b190526402fb43f850ebab2618bc9d24de8889a86ffa2c64105cdb68