Analysis

  • max time kernel
    148s
  • max time network
    114s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 17:17

General

  • Target

    303613be9a9c2c245b660be4e67e2ab7.exe

  • Size

    275KB

  • MD5

    303613be9a9c2c245b660be4e67e2ab7

  • SHA1

    a18ae536c1406e82f2f56c6b4a228272217f3181

  • SHA256

    16b76d9caafb437ea3dbee085aad6f89d10ecc3afb23beb5a79add7cd1071881

  • SHA512

    86ecec525f68226858e350d3482273a0cffb4dec7655cb36794e47d326ad249fe771b6d1c5f0a78a8b0f5d773b885555702336590537fb547783f682522d50c9

  • SSDEEP

    6144:RgoqXNujv12RBaLrBvG/YeemJUAfRSZ3kC4+V3hnKKBaFXNP+SR:RHekjN5LcIBUSZUDuhSJ+SR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\303613be9a9c2c245b660be4e67e2ab7.exe
    "C:\Users\Admin\AppData\Local\Temp\303613be9a9c2c245b660be4e67e2ab7.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Drops file in Windows directory
    PID:516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\~GLC0000.TMP

    Filesize

    137KB

    MD5

    391b6893140db35c642b39bf7acc6212

    SHA1

    777934a7667b5c6be29b7234e048c0e26fc1d5d3

    SHA256

    770fbe170453b9a893e6ff3e15ee4715ca36c76fb7d24a931c5054fc8dbd59c3

    SHA512

    f2ca1b81bc82288127d99bd67a00b99f5ab45d1fa997f8fc5cceebf983d174cc2b3c6388eb35554614f1e05c3075c3b65c26308d83bbdced9ba6acb8511fc6eb

  • memory/516-8-0x000000005F000000-0x000000005F011000-memory.dmp

    Filesize

    68KB