Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 05:44

General

  • Target

    09067dc668f83edba5fc69accf3e720e.exe

  • Size

    3.5MB

  • MD5

    09067dc668f83edba5fc69accf3e720e

  • SHA1

    45e59b90f5f6590589705b118f16ed60248ee9b1

  • SHA256

    52948910501f8c6a94d219d000a1499176b66880cec1dadd3d6e2b776b98ad15

  • SHA512

    26336326bca4e63ceeb5602aa739dca127712071d0289defd7aa7e1b4a9796a3aa8b591457425b7a0dbf375d37f482491d686b3b2b6bdfdc48ec40c26fc6247a

  • SSDEEP

    49152:IV1dMQQ/6AxR5eFr3bkZI7JM9ZtvRDEOINJsCWcEcgnth96qI86PHZMaCLc0G3Dg:6da6Kyry3hNE6CWlcgj96VPHMG311I

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\09067dc668f83edba5fc69accf3e720e.exe
    "C:\Users\Admin\AppData\Local\Temp\09067dc668f83edba5fc69accf3e720e.exe"
    1⤵
    • Loads dropped DLL
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nso53FC.tmp\tools.dll

    Filesize

    236KB

    MD5

    e12f05661436f2974cf91b5fc76fb5f4

    SHA1

    5e0b7887950204713bef3da0018911279f2540ec

    SHA256

    1873de723938193f9f0877b08c160884b79503b6607598158ad99bd909189fdc

    SHA512

    61d42e055865dd98552b29dd69dc3d761bc7f77c1af108ad13b0b390059be5668657645258c0c08052a5fe1e9f6bdb018da136eb103b7335097487ec0de5d22d

  • memory/2980-19-0x0000000003170000-0x00000000031B0000-memory.dmp

    Filesize

    256KB

  • memory/2980-22-0x0000000073DE0000-0x000000007438B000-memory.dmp

    Filesize

    5.7MB

  • memory/2980-24-0x0000000073DE0000-0x000000007438B000-memory.dmp

    Filesize

    5.7MB

  • memory/2980-25-0x0000000003170000-0x00000000031B0000-memory.dmp

    Filesize

    256KB

  • memory/2980-27-0x0000000003170000-0x00000000031B0000-memory.dmp

    Filesize

    256KB

  • memory/2980-30-0x0000000005E90000-0x0000000005F90000-memory.dmp

    Filesize

    1024KB

  • memory/2980-29-0x0000000005E90000-0x0000000005F90000-memory.dmp

    Filesize

    1024KB

  • memory/2980-37-0x0000000073DE0000-0x000000007438B000-memory.dmp

    Filesize

    5.7MB

  • memory/2980-38-0x0000000003170000-0x00000000031B0000-memory.dmp

    Filesize

    256KB

  • memory/2980-39-0x0000000073DE0000-0x000000007438B000-memory.dmp

    Filesize

    5.7MB

  • memory/2980-40-0x0000000005E90000-0x0000000005F90000-memory.dmp

    Filesize

    1024KB