Analysis

  • max time kernel
    151s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 17:47

General

  • Target

    321bb07064a58da85b0aa9021f211c38.exe

  • Size

    292KB

  • MD5

    321bb07064a58da85b0aa9021f211c38

  • SHA1

    f6f575e97f2b588170bbbc5bd0d505d7e09c419a

  • SHA256

    e9b5900f4ca5f709af94bea83e76b0559978e0f6f883ad66a8bc11b2c9d5a374

  • SHA512

    c7343936851d5a81cbb32ad260267f948e0ac7eec1e97e267589112015ea8e746b21541f0641009ddfee179b276c5db4a220e1e8cf5c59181547310dbc91f15d

  • SSDEEP

    6144:/rV59uEo2S1YnQmCX492DkwNP3qpYFVUELk6G7/4RMYrfuriOHUCJS:/rVPu6/eIo4v6G7/kSUCI

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\321bb07064a58da85b0aa9021f211c38.exe
    "C:\Users\Admin\AppData\Local\Temp\321bb07064a58da85b0aa9021f211c38.exe"
    1⤵
    • Loads dropped DLL
    PID:2708

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu35952589.dll

          Filesize

          269KB

          MD5

          af7ce801c8471c5cd19b366333c153c4

          SHA1

          4267749d020a362edbd25434ad65f98b073581f1

          SHA256

          cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

          SHA512

          88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

        • C:\Users\Admin\AppData\Local\Temp\{47582518-973F-4C4A-AEA1-DF1D9CBB07EE}\Custom.dll

          Filesize

          60KB

          MD5

          5f8e3ef6090df78ed65b967f0f31c88c

          SHA1

          0a081843e0c13ffe78ce8ef191decd715f555d43

          SHA256

          523f0cbf0fb8506bfd08d838595a83783e7764e6061e9c0648b9163d5c53c97b

          SHA512

          7c1b6922a30c4a21fe3ecf984a0f30810b4156738f3cf8e29dc6fa0ddc96c58e75ba1b35429010d8f9016632329234275bf7f35a9a296674b505091f692da089

        • C:\Users\Admin\AppData\Local\Temp\{47582518-973F-4C4A-AEA1-DF1D9CBB07EE}\_Setup.dll

          Filesize

          150KB

          MD5

          81498547760c62a7a3ec59ae25bc6656

          SHA1

          6535f7eeeb6dc63087973c4edd1e1ecdbe59d938

          SHA256

          1855344450db012e58b4f4c714e11b6b1f0752efd7b88ee0f2b2ad9a123fbd05

          SHA512

          d859018892ed722102fa68b3c5ecd65d11bf37d6ee4aaafc95be9079eb2187554033ee2fa1b843ef712b0e5884ab150361d176ffcd2356cc20380c25ec8dc455