Overview

overview

7

Static

static

3

155e5d7551...c2.exe

windows7-x64

7

155e5d7551...c2.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 09:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    155e5d75518dfe76f49aa1f40790d2c2.exe

  • Size

    281KB

  • MD5

    155e5d75518dfe76f49aa1f40790d2c2

  • SHA1

    394e9ca4df52035d621d85701d97fcb08087cbd3

  • SHA256

    42afc9199a769d5ab2da4d4c840a4ee1c043a265bc7e5815384b271229bfe0f7

  • SHA512

    267c38ce2fc4b8e8f9cbd8b7e3c9f237310e73f8ef8b39b341a5495b4355650dc4e516620e16cccec822a3c57f2d158dff91fabc4a64cf277da3ec1c637e0d9b

  • SSDEEP

    6144:Xr+yI5RxWBDg7V0eXze6OvA48UEJFeiCLxNw4QC8cdL:Xr+yI3sBDJejgP0JHYz1f9L

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\155e5d75518dfe76f49aa1f40790d2c2.exe
    "C:\Users\Admin\AppData\Local\Temp\155e5d75518dfe76f49aa1f40790d2c2.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu12A04BCF.dll
    Filesize

    269KB

    MD5

    73f84010494b1b9e4b478790bbd3d71a

    SHA1

    136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0

    SHA256

    41a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0

    SHA512

    e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{15B54B79-D47C-49B2-AB59-9C5ECE56698F}\Custom.dll
    Filesize

    58KB

    MD5

    6e8a29b73d7cb2fff7f60d6160cdadcc

    SHA1

    76938d8f6282013f922782a04fb5591eab2901e1

    SHA256

    92748be00d20070b81c154d4bc048ffc2c7196e934f6b92ec49b235c16fb69ee

    SHA512

    f362a5e3dff4bcd77847bd9766ad73ada924ddade1215b972fee5a3ca6a67f9b0ac0763750caef549319b0edc7425fbdb6ca0bf8517e5eac423e12c54977997b

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{15B54B79-D47C-49B2-AB59-9C5ECE56698F}\_Setup.dll
    Filesize

    92KB

    MD5

    1e3ccbcbda4b68691f24757f821008bc

    SHA1

    54e940daf6f7f7f1210c3dab2676f1834b2ba211

    SHA256

    c8b564c811e81cdce83b96eb445abaadd419675f8e554f84abd2c49d0abb6e5b

    SHA512

    1a767052db6293259cfe851f51dedcb9d9eef0b2c36b76abaff4d44e610b71f492506349731e1752194b83a1ae54e400cb1fbf0291db1f9ab43752bbaca4a221

    Download Submit