Overview

overview

7

Static

static

3

1a44c6c8a9...96.exe

windows7-x64

7

1a44c6c8a9...96.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 11:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1a44c6c8a98278b80044ffe5f37b8996.exe

  • Size

    15.0MB

  • MD5

    1a44c6c8a98278b80044ffe5f37b8996

  • SHA1

    0f8ee1ffd64aa3b2422fcfc5c3f6246bf5be0e84

  • SHA256

    1a60447a58058112e13efc45b99e2cdedc5d3465acb2d59b759f530a02f762aa

  • SHA512

    f2641de394eef10b70f010d0a1f701578a92b4d95b8ff277c8cebd6160051d6fc826f2f1b349a35e92b97da5f34f6b9c53aea6892ee964bab371b1c7b3befd4e

  • SSDEEP

    393216:53ltwWFUQoZxlHOFGCEDMJ83a10JgtN3ZWqDxs7T8canb:51twWFUQoBHCEDOEaxtN3V9Rn

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 46 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1a44c6c8a98278b80044ffe5f37b8996.exe
    "C:\Users\Admin\AppData\Local\Temp\1a44c6c8a98278b80044ffe5f37b8996.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1032
    • C:\Users\Admin\AppData\Local\Temp\1a44c6c8a98278b80044ffe5f37b8996.exe
      "C:\Users\Admin\AppData\Local\Temp\1a44c6c8a98278b80044ffe5f37b8996.exe"
      2⤵
      • Loads dropped DLL
      PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-filesystem-l1-1-0.dll
    Filesize

    13KB

    MD5

    0f143310fade4de116070a3917a79c18

    SHA1

    b9a092e885c73cb6d33c9e17d429ede950cf3a26

    SHA256

    2def5140c289b89c9a27a2112a2cc01ad1a902944c597d6204bed4efbc09ff7a

    SHA512

    f87104272aa2326641e46450a0333626567ab3fa85a89b81f7a7c0b1f90a47a70ea189ce3f6bf5db6bb5cccda6d190fb2276edeb44334245b210e7faca05fc60

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI10322\python38.dll
    Filesize

    377KB

    MD5

    66aca01e2c2ec23fc060ea13c4398116

    SHA1

    cf720adca332ad2d048725682e52bb56b703b6e4

    SHA256

    f38b257afba8a1e5bcf8da9a66ba3da951da3d74fd50df8fd1e2782c292ab96d

    SHA512

    ab1d518d483ca468fa982e0ac0f5bdb9ed7a9bcc668e07822cf675061821729dd9892cf370da7313856cd7776f6f242d2b9736c81a69b0b5da3b453f131690c3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI10322\ucrtbase.dll
    Filesize

    412KB

    MD5

    a037e089be5a1438389eb7565e8c1b59

    SHA1

    6e8d142fe25284842d356ba9cb5a2af0a6a1c2ab

    SHA256

    3a628f8ccc16b8ffdae2a1eaa281054649527f3e3c5a53202d154eb7a35747c4

    SHA512

    dccd98f1d127a560903316ea8ac436b81ea254759cf1c662708a4dae18babc91b041fba5cdc9708dcd6e7896fdb84044669c8ee92de38ab21bca8e6f0288910f

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\VCRUNTIME140.dll
    Filesize

    93KB

    MD5

    4a365ffdbde27954e768358f4a4ce82e

    SHA1

    a1b31102eee1d2a4ed1290da2038b7b9f6a104a3

    SHA256

    6a0850419432735a98e56857d5cfce97e9d58a947a9863ca6afadd1c7bcab27c

    SHA512

    54e4b6287c4d5a165509047262873085f50953af63ca0dcb7649c22aba5b439ab117a7e0d6e7f0a3e51a23e28a255ffd1ca1ddce4b2ea7f87bca1c9b0dbe2722

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-core-file-l1-2-0.dll
    Filesize

    11KB

    MD5

    07aa9916d3383d7e040a88665a6df67f

    SHA1

    549c5cd800dc3b51ffb552333777d92cddfb299d

    SHA256

    650555a4c89bfa77054e453ea61f2fe9f095f15a13629f964b903ec7fc07dd12

    SHA512

    d4c70acb84004d27cfe5db22dddccd90217f95d6d2425bbe4359f318056817b669c98907e2679111c49ccf0321011a60cac88c7156566e825b1ea9b1a12e2189

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-core-file-l2-1-0.dll
    Filesize

    11KB

    MD5

    966f1686b72929b452c7c0999791d42f

    SHA1

    20961fd566d789b5657f65595c3a39622c569a22

    SHA256

    2f7553fc7b0e511813ef7639cab9b2466348eeb78ffc534a12e2e271af8e7ce8

    SHA512

    b427eea99d197889e4a4b8801a45baebd20824983f38794ef0e81723c9592c28d75f39744691f650e220208e5f072d61470add4fc99221383e0a89369de5ab93

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-core-localization-l1-2-0.dll
    Filesize

    13KB

    MD5

    3c40a9d1ae0b5e72b2f90761a0fd49cf

    SHA1

    567282eedcb721a7137dde2f135704a50f3cd883

    SHA256

    91c4f107fe8e8c902728e131672bd6953d94964b7a0f1edcc004ae5f471a2a42

    SHA512

    d8f69f1c6ea2837e56c98a2591dbd3a336c40e2ad0af45550406cd00c70fbbc3d7c7594509bef4418aa45e0faf0cb7ce739e6e986ab505b4cd32ce595c236243

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-core-processthreads-l1-1-1.dll
    Filesize

    11KB

    MD5

    25cd5a26ea59e6f4c082b8945b16fc3a

    SHA1

    851ea9bfebbbc901edc98f928d59fb03d15a0037

    SHA256

    093b7168f6b64c655464d9bbf51bbc29456772ff747763c112ed206e023c69cf

    SHA512

    dc001828c40e4a85791644d100eea7132951b2644b59f7f147f17feac515d405313289d5aafbf147ffb1913ce855a501ae79acf832c32ed08d348352c80e9cf3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-core-timezone-l1-1-0.dll
    Filesize

    11KB

    MD5

    cf403b7b90696ab2ded707ffdea27112

    SHA1

    8d25084c7d24143cf95303bfa0654a42d9cb0ca2

    SHA256

    f5f5e3cfa9237bb04bd485f28cecd07892212335648d32e9e3e1b248784baeb6

    SHA512

    0004a31e0982fc4007c7fdaf0d06b6d3a19dc35ca00feeb8f161b62695b063bb07fb409c0926a1f95a4698ca57c22f773d9a431eee586633b075366de0cbacca

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-conio-l1-1-0.dll
    Filesize

    12KB

    MD5

    ed14b64c94f543974b7fdc592fa0594b

    SHA1

    dc66ca3de44c021d89ebd5160c447aaedc565514

    SHA256

    9165248996814b72f6a334750e65994b39f971267ffc95f759e529356fa3125c

    SHA512

    5d20bedcfb8d2f603b3f27d874a9e0e3a7ca7df4809aab52b02af630c0037b37923536cc93c78c9deb014df28e378d16d67e99688f8b656e3e7bfd1e2e914dcc

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-convert-l1-1-0.dll
    Filesize

    15KB

    MD5

    1908861649e67cdc20c563c234a89914

    SHA1

    471ae3b9a3b40e63c880362892865ecf8bd80f67

    SHA256

    4aea1cedd976ef15a47a3433f3a2e176b1c5e495a54497dba27247b35a1b8449

    SHA512

    dec24d5c3f31c90cbec3810290506309a1db5677022c600d3bdd2e92b73078dc6353023f2aeefa408aceac7c9f7ed5a2ff07a399b446e177ff93e5fa1b3f9353

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-environment-l1-1-0.dll
    Filesize

    11KB

    MD5

    af851dfd0d9fecb76ff2b403f3c30f5b

    SHA1

    30f79fb4d4c91af847963c46882d095d1f42efbe

    SHA256

    6a3fd4b050f19ec5c53c15544b1f1b1540ac84f6061c0ec353983eb891330fda

    SHA512

    04509b02115ec9b5bc4ee2f90e49e799ccf85884fe1f11f762f0614a96764b8f2b08f96895c467c5b11f20273183096b2bcceb0b769df9d65b56c378cb32b0f5

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-heap-l1-1-0.dll
    Filesize

    12KB

    MD5

    f97e7878a2b372291b1269d80327bbf6

    SHA1

    cee6f776fe0aa5a6d4854058f20f675253f48998

    SHA256

    c4e195d297d163a49514847ef166da614499404d28bc9419e3e6a28a8e03e9b6

    SHA512

    475898e60ffc291362fda45ab710b9ddaf1cf5e82f66dfcc04998ded583c54692ecfcac6cc4fe21b32bdd0e4dce8ac32fd9aecca2b0b60f129415180350d7825

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-locale-l1-1-0.dll
    Filesize

    11KB

    MD5

    761ddd8669a661d57d9cf9c335949c06

    SHA1

    251bbcad15771d80492f1deb001491a7abb6c563

    SHA256

    fe51064e0728d553d0f3e96967671f7e6ae4ebd35d821679292014dd4c3bb8e3

    SHA512

    5ad590a5f81532f8bf21fb4f62bc248e71bbf657dfb1720b2d9f1628033afe39426a1c27a89d9a06e50849bd0ed2242afa93e4cf2bc83f03a922b8204f0f4f2a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-math-l1-1-0.dll
    Filesize

    20KB

    MD5

    56556659c691dd043dbe24b0a195d64c

    SHA1

    117b9a201d1e8bb9e5fadeae808141d3fa41fb60

    SHA256

    2e1664e05c238d529393162f23640a51def436279184d2e2c16cfbf92ab736c1

    SHA512

    a8d4c4a24e126c62b387120bae0edd5cbce6d33b026590ff7470d72eb171ffe62b8b2b01e745079c9a06cf1eb78a166707514715e17bbd512981792a1d2127e0

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-process-l1-1-0.dll
    Filesize

    12KB

    MD5

    6631c212f79350458589a5281374b38b

    SHA1

    88be6865aac123ffbdafec32a6fba34a26428875

    SHA256

    52cc325a4c2158b687c95f9702f4be2e3ec41c80207e50f252f5620ba1784649

    SHA512

    e53d7bfa2639efccdb66d37957972fd1f8eb2beea3a81145588ed622501ee50261e05a06611ee7126564b11a5301b109f295d062f1a2dc1e44a2847000fd7298

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-runtime-l1-1-0.dll
    Filesize

    15KB

    MD5

    bbae7b5436d6d1b0fc967ff67e35415f

    SHA1

    f67bc165cefb119ad767b6bec27a1102c0fd2bac

    SHA256

    8150a238851d7da74bc8f6f13262a8d6568373dc509f67544ab6a62398f20c4f

    SHA512

    4201a8edfe303057545d04de683bbdf0acb68cf4d2e894192f899a70398df18299432c0f6caee72d917a986882bbc0585035a9b934d4579f67a1c98cc894dee2

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-stdio-l1-1-0.dll
    Filesize

    17KB

    MD5

    53e9526af1fdce39f799bfe9217397a8

    SHA1

    f4a7fbd2d9384873f708f1eeaeb041a3fbe2c144

    SHA256

    de44561e4587c588bc140502fd6cd52e5955abeec63d415be38a6d03f35f808f

    SHA512

    8167ee463506fe0e9d145cc4e0dc8a86f1837ae87bc9efe61632fb39ef996303e2f2a889b6b02ff4a201faf73f3e76e52b1b9af0263c6fcfdac9e6ea32b0859f

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-string-l1-1-0.dll
    Filesize

    17KB

    MD5

    eccf5973b80d771a79643732017cea9a

    SHA1

    e7a28aa17e81965ca2d43f906ed5ab51ac34ee7c

    SHA256

    038b93e611704cc5b9f70a91ebf06e9db62ef40180ec536d9e5ab68eb4bb1333

    SHA512

    b95f5efc083716cb9daba160b8fa7b94f80d93ab5de65a9fb0356c7fb32c0d45fe8d5d551e625a4d6d8e96b314bae2d38df58b457b6ced17a95d11f6f2f5370e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\api-ms-win-crt-time-l1-1-0.dll
    Filesize

    13KB

    MD5

    090dd0bb2bddee3eaae5b6ff15fae209

    SHA1

    ddc5ac01227970a4925a08f29ba65eb10344edb1

    SHA256

    957177c4fe21ae182dfe3a2a13a1ff020f143048fc14499ae9856e523605083e

    SHA512

    2e0b8567231e320b2e52af3b86047cfab16824e2db1d1bb17bafe7a1c6c5f0bf62d76656206a3d7ef1d3849b479bf5e09db1f0f4e4cd0aa2df09838d35c877f3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\python38.dll
    Filesize

    348KB

    MD5

    4a263c0793e0dac536eacd3944a88e43

    SHA1

    45215d7ba30ff698efcb330efedad87b34913d55

    SHA256

    4b2357bf93ee279b0e4b87608d25db6686646036b785a99431a5fe7e42c4ca5a

    SHA512

    6685abc5dca7ad94ee81abce72eb303cc5f3dfdf2e87d0aa18a3316c96fc1c8a9e41fc7ee7f9b4415001db049606eb6dcc466512b325d7acd11b1f2e1d38a1a6

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI10322\ucrtbase.dll
    Filesize

    389KB

    MD5

    7a64d7b9523b31deab6d4b459f8733e6

    SHA1

    6e1f19acf548da51a30d10b311206547d6fe56ff

    SHA256

    e050530a78abd659b47079fbf2bbf86e55fad3dbaca79b1e6404c08fed2e1af3

    SHA512

    62791dd57087f6c3d898035a8908b5ecfe74733f34a5864867079a302d640c33a3a696a079497c1454a706c26fa2008228621780274e34123a77901f2fb24a99

    Download Submit