Analysis

  • max time kernel
    120s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    08-12-2023 01:53

General

  • Target

    224e86b3eb5000e7fc4c516f4c8e0cd0ce42e2c49a230c8be2e276508d1ab260.exe

  • Size

    132.9MB

  • MD5

    b0bb47753db0d37ba945a53f22a886b0

  • SHA1

    0b5e8ad1a6f834ef166d710256647f7faeeb6e12

  • SHA256

    224e86b3eb5000e7fc4c516f4c8e0cd0ce42e2c49a230c8be2e276508d1ab260

  • SHA512

    6ae510c9b7a086d05b1128b571b8a0ef1a1c0ba106e833b0e30f8df17d5f0038f8dbac29f95a998ee4af52b597c3ac990c8d9e9a5f6e05f954f0dd3a7a88c586

  • SSDEEP

    786432:VWXgF0+WzNQXBVBEEIVeHDWIBV0aMoSctbw17p2NsBHae7XRYBix72TtLwSTRpfW:VWa0+vKeh0ew19S8ae7XRuiRAhK

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\224e86b3eb5000e7fc4c516f4c8e0cd0ce42e2c49a230c8be2e276508d1ab260.exe
    "C:\Users\Admin\AppData\Local\Temp\224e86b3eb5000e7fc4c516f4c8e0cd0ce42e2c49a230c8be2e276508d1ab260.exe"
    1⤵
    • Modifies system certificate store
    PID:1600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1600-0-0x00000000069A0000-0x0000000007329000-memory.dmp

    Filesize

    9.5MB

  • memory/1600-3-0x00000000069A0000-0x0000000007329000-memory.dmp

    Filesize

    9.5MB

  • memory/1600-4-0x00000000011D0000-0x0000000001A38000-memory.dmp

    Filesize

    8.4MB

  • memory/1600-5-0x0000000007F20000-0x0000000008B09000-memory.dmp

    Filesize

    11.9MB

  • memory/1600-8-0x0000000007F20000-0x0000000008B09000-memory.dmp

    Filesize

    11.9MB

  • memory/1600-9-0x0000000000C20000-0x0000000000C31000-memory.dmp

    Filesize

    68KB

  • memory/1600-12-0x0000000000C20000-0x0000000000C31000-memory.dmp

    Filesize

    68KB

  • memory/1600-13-0x0000000006360000-0x0000000006414000-memory.dmp

    Filesize

    720KB

  • memory/1600-16-0x0000000006360000-0x0000000006414000-memory.dmp

    Filesize

    720KB

  • memory/1600-17-0x0000000000BD0000-0x0000000000BDC000-memory.dmp

    Filesize

    48KB

  • memory/1600-21-0x0000000000FA0000-0x0000000000FBF000-memory.dmp

    Filesize

    124KB

  • memory/1600-20-0x0000000000BD0000-0x0000000000BDC000-memory.dmp

    Filesize

    48KB

  • memory/1600-25-0x0000000000FC0000-0x0000000000FD5000-memory.dmp

    Filesize

    84KB

  • memory/1600-24-0x0000000000FA0000-0x0000000000FBF000-memory.dmp

    Filesize

    124KB

  • memory/1600-28-0x0000000000FC0000-0x0000000000FD5000-memory.dmp

    Filesize

    84KB

  • memory/1600-29-0x0000000001170000-0x0000000001182000-memory.dmp

    Filesize

    72KB

  • memory/1600-32-0x0000000001170000-0x0000000001182000-memory.dmp

    Filesize

    72KB

  • memory/1600-36-0x0000000005E40000-0x0000000005E5D000-memory.dmp

    Filesize

    116KB

  • memory/1600-39-0x0000000005E40000-0x0000000005E5D000-memory.dmp

    Filesize

    116KB

  • memory/1600-40-0x0000000001190000-0x00000000011CA000-memory.dmp

    Filesize

    232KB

  • memory/1600-43-0x0000000001190000-0x00000000011CA000-memory.dmp

    Filesize

    232KB

  • memory/1600-44-0x0000000006570000-0x0000000006659000-memory.dmp

    Filesize

    932KB

  • memory/1600-47-0x0000000006570000-0x0000000006659000-memory.dmp

    Filesize

    932KB

  • memory/1600-48-0x00000000067B0000-0x00000000068F9000-memory.dmp

    Filesize

    1.3MB

  • memory/1600-51-0x00000000067B0000-0x00000000068F9000-memory.dmp

    Filesize

    1.3MB

  • memory/1600-52-0x00000000074C0000-0x000000000764E000-memory.dmp

    Filesize

    1.6MB

  • memory/1600-55-0x00000000074C0000-0x000000000764E000-memory.dmp

    Filesize

    1.6MB

  • memory/1600-56-0x0000000006080000-0x0000000006086000-memory.dmp

    Filesize

    24KB

  • memory/1600-59-0x0000000006080000-0x0000000006086000-memory.dmp

    Filesize

    24KB

  • memory/1600-60-0x0000000006090000-0x0000000006099000-memory.dmp

    Filesize

    36KB

  • memory/1600-64-0x00000000062E0000-0x0000000006304000-memory.dmp

    Filesize

    144KB

  • memory/1600-67-0x00000000062E0000-0x0000000006304000-memory.dmp

    Filesize

    144KB

  • memory/1600-63-0x0000000006090000-0x0000000006099000-memory.dmp

    Filesize

    36KB

  • memory/1600-140-0x00000000011D0000-0x0000000001A38000-memory.dmp

    Filesize

    8.4MB