Analysis

  • max time kernel
    187s
  • max time network
    221s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/10/2023, 01:48

General

  • Target

    Universal Project/bin/Debug/Universal Project.exe

  • Size

    848KB

  • MD5

    1d0249175ad0d5ef7b45abda9217d985

  • SHA1

    774e22b0b759f2295b928e7ddd80d72d5b3d7033

  • SHA256

    c8257e7c100f75ba982e3505efc19c25c04ddbc9d0059aef36075d569d51fea4

  • SHA512

    9ae8cda66af681a7829b91eea8ca79209ebb2ae385464e97f6839ea1cd636c47e7d3441b0e56346c7b2cbcab929756cfef464a41d3600f4eeb1a8aadc6574ffb

  • SSDEEP

    12288:WcHqbvW+vWBXbQSCaFpxXLXHwQRv1XEW+vDYP35Wl8Cgw9EnQGW+3:96vW+vWFx3XDHJ0W+vDYBWlnXcQGW+3

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Universal Project\bin\Debug\Universal Project.exe
    "C:\Users\Admin\AppData\Local\Temp\Universal Project\bin\Debug\Universal Project.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:3848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\53b4dde3-ceef-4149-b63d-4b67cc36c3e9\GunaDotNetRT.dll

    Filesize

    136KB

    MD5

    9af5eb006bb0bab7f226272d82c896c7

    SHA1

    c2a5bb42a5f08f4dc821be374b700652262308f0

    SHA256

    77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

    SHA512

    7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

  • C:\Users\Admin\AppData\Local\Temp\53b4dde3-ceef-4149-b63d-4b67cc36c3e9\GunaDotNetRT.dll

    Filesize

    136KB

    MD5

    9af5eb006bb0bab7f226272d82c896c7

    SHA1

    c2a5bb42a5f08f4dc821be374b700652262308f0

    SHA256

    77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

    SHA512

    7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

  • memory/3848-16-0x0000000070F40000-0x0000000070F77000-memory.dmp

    Filesize

    220KB

  • memory/3848-0-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/3848-4-0x0000000005400000-0x0000000005492000-memory.dmp

    Filesize

    584KB

  • memory/3848-5-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/3848-6-0x00000000053C0000-0x00000000053CA000-memory.dmp

    Filesize

    40KB

  • memory/3848-7-0x0000000005610000-0x0000000005666000-memory.dmp

    Filesize

    344KB

  • memory/3848-8-0x0000000005EC0000-0x000000000610C000-memory.dmp

    Filesize

    2.3MB

  • memory/3848-9-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/3848-10-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/3848-19-0x0000000073230000-0x00000000732B9000-memory.dmp

    Filesize

    548KB

  • memory/3848-3-0x0000000005910000-0x0000000005EB4000-memory.dmp

    Filesize

    5.6MB

  • memory/3848-1-0x0000000000890000-0x0000000000968000-memory.dmp

    Filesize

    864KB

  • memory/3848-2-0x00000000052C0000-0x000000000535C000-memory.dmp

    Filesize

    624KB

  • memory/3848-20-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/3848-21-0x0000000070F40000-0x0000000070F77000-memory.dmp

    Filesize

    220KB

  • memory/3848-22-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/3848-23-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/3848-24-0x0000000007B40000-0x0000000007C5A000-memory.dmp

    Filesize

    1.1MB

  • memory/3848-25-0x0000000007AC0000-0x0000000007B26000-memory.dmp

    Filesize

    408KB

  • memory/3848-26-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/3848-27-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/3848-28-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB