Analysis

  • max time kernel
    7s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 16:51

General

  • Target

    2e91952f34c78a0f4260a4a26d4170af.exe

  • Size

    112KB

  • MD5

    2e91952f34c78a0f4260a4a26d4170af

  • SHA1

    03f04f8ccf434f6fdb240f5dbcad4b12fb64a9ab

  • SHA256

    4d535dc7549bcee677eecbccac1820138801e77ded07e9d1bc69acce640e61ce

  • SHA512

    8d69a29f032726b1a8ac913d8bf3ba3b641de85ddb45dd2a863cd4cdfddd138a20f352da74ad1b4d353d1b6407ee586e1fcc1678eb472f2e72a99943bb6964bd

  • SSDEEP

    3072:OOxOwERTC7kus+jSfyTA0pTCib96VWQx1zeZN:OCutC7NIfyTZkzeD

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2e91952f34c78a0f4260a4a26d4170af.exe
    "C:\Users\Admin\AppData\Local\Temp\2e91952f34c78a0f4260a4a26d4170af.exe"
    1⤵
      PID:1752
      • C:\Users\Admin\AppData\Local\Temp\2e91952f34c78a0f4260a4a26d4170af.exe
        "C:\Users\Admin\AppData\Local\Temp\2e91952f34c78a0f4260a4a26d4170af.exe"
        2⤵
          PID:2984
          • C:\Program Files (x86)\Internet Explorer\iexplore.exe
            "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
            3⤵
              PID:1284
              • C:\Program Files\Internet Explorer\IEXPLORE.EXE
                "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
                4⤵
                  PID:2688
          • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
            "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2688 CREDAT:275457 /prefetch:2
            1⤵
              PID:2564

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

              Filesize

              344B

              MD5

              81c52979fe9a730deb328cef913b0910

              SHA1

              618652e0e62e984916a29da48bc2a3cc69460ad6

              SHA256

              21bf755a5eca1aa4c30c739bb214d6a50e2259b47f1bd009b6dc2cf4067bb6b3

              SHA512

              9178306e8942ac93ed43182950ebd7b0a0184a46e0d1d6fc42745d5f3e280d09ae0bd26a2b915026171e364fe3ce04a16d7d2c0422b4c5d4ccd2b085984654ae

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

              Filesize

              344B

              MD5

              d1d9c1c2faa880a1cd4d3863fdb4118b

              SHA1

              a42e386c10eaecf182d97966f2ed05a43b42354a

              SHA256

              c4cb6559ebbe7d559474026d85629435502e9e9a146aace97ce12cdb139877ba

              SHA512

              cf2e9dbeaa5c3c25534b348bec2f231d98402bd53baabb78fb6f9baee6358ffa93cf04a2e4b17e86d87f29a781fce37edd13a1bb5bd94fd094913036385991b1

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

              Filesize

              344B

              MD5

              5537e201c769263732b6a65abb04349a

              SHA1

              3e4a4dd0f8e9c719f14803548702b8044eec99a4

              SHA256

              76a8480d0ca1bef8e914b41672045df96c4428af2f7cdf75b243eb78b75b6666

              SHA512

              d0b4807a0c58f3cc6178b3f3b9bca365ca335f37f5b4a1bf5fd3c50db8e21f7f092afbc6f2cf2f7f8012c63839ab3fddcf01636df3bdbcdda991f8cdfb5af1c2

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

              Filesize

              344B

              MD5

              ad6168f4cef37c7628ee9411dea26573

              SHA1

              a8a1f45a0d8a7b618d32e4e4de1c6e952c250e11

              SHA256

              26f2f8593cc1c6cf11778c9a3317004904efd02286b781fd9a715f2ba888b1f4

              SHA512

              3941d7213cab866afe1d8e8c25571ab26a6e15e0434db24beb01eacd704595ca1af18e30f5255562f4c3c5720c68241e2c8869087110ff98c0b70b41ddf5e395

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

              Filesize

              344B

              MD5

              11eabc493d8d9136b96fb419d2ae18ee

              SHA1

              96d5d49760a1450cd808f0a3c00c20ba558fd026

              SHA256

              e993c76e661ead52f80a10a01971bda3ba1d5bee363532d844b1e036c314ea11

              SHA512

              0a6bb8c3fbd5a0467a805425c2c02b79cedc0ddab9ab90c116478d1f80c9886d8f014f5d0239f68927e899c12431ad07eb8a38653665f164ec12fee5656e6249

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

              Filesize

              344B

              MD5

              9234962c1242a04234a9a797169230fd

              SHA1

              edaaa0ac5d6a134a432ff5483be52c99e79f3f4d

              SHA256

              06a53cd23e186b471d8036fc3644322eb0cb52ac32ef42c52ac337193445ec1d

              SHA512

              0a3ff37a8d37576a01d063e72746ec971abd19574378ff307a8462b7f926237e82829fdb2d47db3ab9490afe667f11f0af31f5fd4259ecb9de244b0b129a14d4

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

              Filesize

              344B

              MD5

              047c0f76b19f9491d0a6f1bf722ca093

              SHA1

              0b554a76e510fd795e39c827cc69c1473ab74c4c

              SHA256

              cbcc896df52ba00794ab2565f5e757890289d286a6c666731b461deeaebfccf2

              SHA512

              8bb9ee6e7a5a2d95cb955d945b77755e1d4ae513e40fdcd6dcdd034abc6605b1acdb61ff048d4709381f68af7ecf505632106078378170bad60db82263523e5e

            • memory/1752-21-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-7-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-49-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-43-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-41-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-39-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-35-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-33-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-31-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-29-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-27-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-25-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-23-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-0-0x0000000000400000-0x0000000000438000-memory.dmp

              Filesize

              224KB

            • memory/1752-19-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-17-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-15-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-51-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-5-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-3-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-1-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-37-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-23057-0x0000000000400000-0x0000000000438000-memory.dmp

              Filesize

              224KB

            • memory/1752-23045-0x0000000000340000-0x0000000000378000-memory.dmp

              Filesize

              224KB

            • memory/1752-63-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-61-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-59-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-53-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-55-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/1752-57-0x0000000000020000-0x000000000003D000-memory.dmp

              Filesize

              116KB

            • memory/2984-23501-0x00000000021F0000-0x000000000223E000-memory.dmp

              Filesize

              312KB

            • memory/2984-23069-0x00000000021F0000-0x000000000223E000-memory.dmp

              Filesize

              312KB

            • memory/2984-23070-0x0000000000400000-0x000000000044E000-memory.dmp

              Filesize

              312KB

            • memory/2984-23059-0x0000000000400000-0x000000000044E000-memory.dmp

              Filesize

              312KB