Analysis

  • max time kernel
    64s
  • max time network
    86s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-ja
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-jalocale:ja-jpos:windows10-2004-x64systemwindows
  • submitted
    16/10/2023, 14:21

General

  • Target

    OnigyuH_KR.exe

  • Size

    4.8MB

  • MD5

    f4ebac4f2c234cc76951999fced136b9

  • SHA1

    41d2a537f8a42b657e0889d82221c619f38e8044

  • SHA256

    fcfaed68b3d88c882ce0ee9400063c11f5827b207038f179e1ba07ece56f283e

  • SHA512

    c9bc5b5c9b5d23e77ae19218b7bcb72ed16416e7011e42d18fbd480584891b664f2b057017c5fab53387d3466a120d86186680625f459035378dd876ac276cf5

  • SSDEEP

    98304:FRgRgOydqjAuAkp5T0tmEClLztm8ZCpHeF9It:HOydqjAux5omEx8lzu

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OnigyuH_KR.exe
    "C:\Users\Admin\AppData\Local\Temp\OnigyuH_KR.exe"
    1⤵
    • Loads dropped DLL
    PID:2996

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\evbB08.tmp

          Filesize

          1KB

          MD5

          0009b129ebd0051d2b4cba4447f88024

          SHA1

          efaf7bbd5a8de77c8b2c64f43e2468a2c11c28b0

          SHA256

          2bfc5107c06f922ae6af0e3af1628cc7c5ddadb5e6396fb1e35e36edb315416a

          SHA512

          c86781ef7992bd7cb0633d8f83c6df2ae186005a546276ab093590205b48a315b714f3117d59b59df0d252d9b299ee27b9b7a10498a0c1f2c2fab56bc90c4889

        • memory/2996-0-0x0000000000400000-0x0000000000935000-memory.dmp

          Filesize

          5.2MB

        • memory/2996-1-0x00000000779C2000-0x00000000779C3000-memory.dmp

          Filesize

          4KB

        • memory/2996-3-0x00000000779C3000-0x00000000779C4000-memory.dmp

          Filesize

          4KB

        • memory/2996-7-0x0000000010000000-0x0000000010022000-memory.dmp

          Filesize

          136KB

        • memory/2996-9-0x0000000000C30000-0x0000000000C40000-memory.dmp

          Filesize

          64KB

        • memory/2996-10-0x0000000000400000-0x0000000000935000-memory.dmp

          Filesize

          5.2MB

        • memory/2996-11-0x0000000010000000-0x0000000010022000-memory.dmp

          Filesize

          136KB