Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-12-2023 16:17

General

  • Target

    05447f6ac01a091b1848f233a69c17f4.exe

  • Size

    303KB

  • MD5

    05447f6ac01a091b1848f233a69c17f4

  • SHA1

    6952b87bff480bf969d622722d0b002e0427c154

  • SHA256

    30c42e705d2603363211d9bd8f7f21971eff4950613d0d3164ef745da96845c7

  • SHA512

    c60a081546abbda02d641340fa7f17630367f156607fed8f0dae55bc3b06303a71559b2165c8a5f33328a72ab487d75e244087ab47e1df65cf2cc99c1e0cdd8e

  • SSDEEP

    6144:Trnr9UarEuMEvjr24HtrxTUGFVENlS8NlY2RKaVUx4vYNPHKD+QR:Trnr9jEsX2utrxAG7ENl/NlNRBVBANP2

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\05447f6ac01a091b1848f233a69c17f4.exe
    "C:\Users\Admin\AppData\Local\Temp\05447f6ac01a091b1848f233a69c17f4.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuFDC01170.dll

    Filesize

    190KB

    MD5

    a6941feedb193a4ef0bb9cfc0b6eb437

    SHA1

    a2b103e341a4d42b366eed3c9b05df3be32c5f83

    SHA256

    cc729115a29d8db027a3185a0b5146c080414e21ec30fd7ebac6835504299712

    SHA512

    c726bde5090fde86f2520a938d3efe44afaf6227cb9f9d313669f11da48907c59b177381a5d393b07d785ddd47ebeb86794db17cbf6df2bba2e13a4ce97f345d

  • C:\Users\Admin\AppData\Local\Temp\{BC5674D8-48A3-4F4B-ADA0-008167B5562E}\_Setup.dll

    Filesize

    166KB

    MD5

    bfff8929a4a3efae7d55d408c85b26c9

    SHA1

    e49fd2402485651aea72090a7d777c98827ac991

    SHA256

    68c1d06228d20bf12052e92c8b2af307eeff51c3b5caac3183fd3a76db7dd573

    SHA512

    0e8f3d3c8ef9f19a040075822924c2da4ea9ed0ed1e8f50588c6fd541496cd347dee3675cb14a080a3fcc2911e1c5d0b656a211596e7dd967dcf5ab1661ce631

  • C:\Users\Admin\AppData\Local\Temp\{BC5674D8-48A3-4F4B-ADA0-008167B5562E}\_Setupx.dll

    Filesize

    43KB

    MD5

    3dcd34c76ece9df5d90dc8133caaa9ae

    SHA1

    6f88b7346ae8bf469c785e2dbcadc17248f88faf

    SHA256

    2244157361ab0a1ce81944416971b6433f21fbcc3763b613161adcb51fd9f5e4

    SHA512

    16fd6cfa52a8db0878b9fedfb79ebad7846c5ae2c9cc91a009266cd395733206691107e04ac70d99e4c8a7ef5c69ed0125d7925b6d937dcb5e95d3b2275e1487