Resubmissions

27-10-2023 18:39

231027-xaprasgd3t 10

27-10-2023 14:50

231027-r7ls1sfa81 10

27-10-2023 14:46

231027-r5prwsgf98 10

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-10-2023 14:46

General

  • Target

    DesignaKnit v8.07.61 (07.2017).exe

  • Size

    12.9MB

  • MD5

    508babbaa6f8b247629b3f0861721ed6

  • SHA1

    76fcdec2cbb07c1950fc32deb48e1660a0657189

  • SHA256

    9ef0e4dfd3d8172982d137edcd8a0e5ae220141410c80ee884c1cd77cc9a46c8

  • SHA512

    1774a19adedea34c11a3829f59d1927a0c7a0eddb27932f1246af93c286ff80c2a88566514b4a59223e06dcfac7041eb40a71a983fa2fd42036df2fa6951636d

  • SSDEEP

    196608:XjfHfeasLpjs10+k09F9fIKJsqW6MhDdbHLLRyYBtE3P3AaPCArRrytfCtGnfdVQ:XrHBEAFsZ60r9yYU36AtrytfC8dO

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 58 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DesignaKnit v8.07.61 (07.2017).exe
    "C:\Users\Admin\AppData\Local\Temp\DesignaKnit v8.07.61 (07.2017).exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3812
    • C:\Users\Admin\AppData\Local\Temp\is-MEA57.tmp\DesignaKnit v8.07.61 (07.2017).tmp
      "C:\Users\Admin\AppData\Local\Temp\is-MEA57.tmp\DesignaKnit v8.07.61 (07.2017).tmp" /SL5="$70118,13062523,128000,C:\Users\Admin\AppData\Local\Temp\DesignaKnit v8.07.61 (07.2017).exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:3052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\is-0FUKM.tmp\_isetup\_iscrypt.dll

    Filesize

    2KB

    MD5

    a69559718ab506675e907fe49deb71e9

    SHA1

    bc8f404ffdb1960b50c12ff9413c893b56f2e36f

    SHA256

    2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc

    SHA512

    e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

  • C:\Users\Admin\AppData\Local\Temp\is-MEA57.tmp\DesignaKnit v8.07.61 (07.2017).tmp

    Filesize

    1.1MB

    MD5

    5d7d14a1449317bfd7a4fc792ff18a16

    SHA1

    082929b574ff610d73e021173e1ee79e30b08a5d

    SHA256

    5f21584b10818e164381251bab3c87eec4fa225cb5b7e6bbd55558528f864dbf

    SHA512

    c8dc63fff4ead8acdc459b6ec0abc7f4ba9867f33b0e1521e7424c0ab072605b6e5cfd291d5f25490615a6c38d34c2a107466b11ac30e9774def4f67a4ff7e64

  • C:\Users\Admin\AppData\Local\Temp\is-MEA57.tmp\DesignaKnit v8.07.61 (07.2017).tmp

    Filesize

    1.1MB

    MD5

    5d7d14a1449317bfd7a4fc792ff18a16

    SHA1

    082929b574ff610d73e021173e1ee79e30b08a5d

    SHA256

    5f21584b10818e164381251bab3c87eec4fa225cb5b7e6bbd55558528f864dbf

    SHA512

    c8dc63fff4ead8acdc459b6ec0abc7f4ba9867f33b0e1521e7424c0ab072605b6e5cfd291d5f25490615a6c38d34c2a107466b11ac30e9774def4f67a4ff7e64

  • memory/3052-6-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/3052-13-0x0000000000400000-0x000000000052E000-memory.dmp

    Filesize

    1.2MB

  • memory/3052-14-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/3052-36-0x0000000000400000-0x000000000052E000-memory.dmp

    Filesize

    1.2MB

  • memory/3052-41-0x0000000000400000-0x000000000052E000-memory.dmp

    Filesize

    1.2MB

  • memory/3052-43-0x0000000000400000-0x000000000052E000-memory.dmp

    Filesize

    1.2MB

  • memory/3812-1-0x0000000000400000-0x0000000000429000-memory.dmp

    Filesize

    164KB

  • memory/3812-11-0x0000000000400000-0x0000000000429000-memory.dmp

    Filesize

    164KB