Analysis

  • max time kernel
    106s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 19:26

General

  • Target

    37ddf2df569a283bb3c3e5577f868d0d.exe

  • Size

    304KB

  • MD5

    37ddf2df569a283bb3c3e5577f868d0d

  • SHA1

    53ca45659b6b017ea760828ad05a892ad5f0a0e1

  • SHA256

    49c2764153706cb165b85abaf8e9e2772514514b0f6965859d1382aba1049391

  • SHA512

    faf97663e4ff3355bf4b5cfa9519e5c508b426a2471882282c6931891e049b5a3638e1f0b93608365eb0b34127f1788c63566f9de7f91ef4db0080844d6daf03

  • SSDEEP

    6144:MrnV9UarEuMEvjr24HtrxTUGFVENoeLEa4c+FamYae99GODt4C15tsJVnDQwj:MrnV9jEsX2utrxAG7EN0IH//J4wWvD

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\37ddf2df569a283bb3c3e5577f868d0d.exe
    "C:\Users\Admin\AppData\Local\Temp\37ddf2df569a283bb3c3e5577f868d0d.exe"
    1⤵
    • Loads dropped DLL
    PID:2004

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\ProgramData\InstallMate\75D4E623\cfg\1.ini

          Filesize

          952B

          MD5

          0e38140098ba0e904d0698977e3b85ac

          SHA1

          1cd246d602c342c271e8eaba3ddcd0cdb61c89e4

          SHA256

          5763d2bbca02b0ff9696fdeb8c9ca2cc040e58a4371b3d66938e607d1680003e

          SHA512

          1e2f88a734d82b2c812fc2bc8a931a291fc864719d9340ba1f6a6aada357dfeb432ee6f26186c76aa1cc1f5e51bf48265ce706c008efbe9c9f12ef20e1314261

        • C:\ProgramData\InstallMate\75D4E623\cfg\1.ini

          Filesize

          952B

          MD5

          18f31f5e005afc6b8ff34393f20435ce

          SHA1

          a4146c9217d9d152874e4f81833062118d091ec9

          SHA256

          4b441020c29e2e55e7a71b896bacabff95819e619369504a38502f54ca8493c4

          SHA512

          d448920877ae3ded5177732a6de2cc1671b8e921a3a08b5ee1ea96e058b7555407c41ec3ba65cf72784b275eb3938531cdf8eb54dc0e7957bee6a7378abc936b

        • C:\ProgramData\InstallMate\75D4E623\cfg\1.ini

          Filesize

          952B

          MD5

          d3eb8fa11595b9903fc8ba624aaf56dd

          SHA1

          63d7d82e0752934d4640085227d6b7267a0367d9

          SHA256

          b9b0ba4ba2b244e4615daa69858a4f7188d9dfc8a3ba0d23fb347f1b5c53e9a7

          SHA512

          b8979d14b4e68b23e492ef6d07e5ad506611f25f70b5d4b90d0b1314dffecdb0a34b94d903bef89837b44f7c64bb9c1d575ee2c414a2970e0681159ebd951c40

        • C:\Users\Admin\AppData\Local\Temp\Tsu122EF247.dll

          Filesize

          21KB

          MD5

          e8109ed181141675166eba43d690c2cb

          SHA1

          67a54ffd5853060b1da707ddb762fe1c248cd7af

          SHA256

          5e7cc2fcc3e3e7dbeca751b0fdd7353375182f4868dc60fa4e654189473b753f

          SHA512

          265cb3cd2e667ed1466354aab9aa8dfe13d13873d95d9eebdd33aa1404c5a4bc12c57aea2e8f5f01c141584fc4a69934b6b187dac27f8d2bae1d0d821688ccd4

        • C:\Users\Admin\AppData\Local\Temp\{6992ACBC-07DC-4110-A3FB-4FFEB2718E4A}\_Setup.dll

          Filesize

          26KB

          MD5

          a820b64c3b44ae04f7eed3624a6d8772

          SHA1

          88d98eedb5813a3058f63cd6c79d13b1038185b4

          SHA256

          8e7e4201db97a0129652bce480331d150e19c1e0148c8a7e4b478ed994a23ccb

          SHA512

          c85f311fd06730403be4b150e417ad9644c37d511ca60ba064a75c3f121365628f2f7958deac1447af523db31c52c8b500322430b921e282ab69aa776f159ff7

        • C:\Users\Admin\AppData\Local\Temp\{6992ACBC-07DC-4110-A3FB-4FFEB2718E4A}\_Setupx.dll

          Filesize

          12KB

          MD5

          7b5bed975f4d85425e63fe3982baaf6f

          SHA1

          8f2ce97dcf09824d13c921143f0c952503da1bc1

          SHA256

          bcc3cc28af1dfa91687f386b262bc71cdf456ecb847a3122763dfeea36f911d3

          SHA512

          e88e3e54b78ef1c7347437a3865bf8173334af02655bf87551b46f11b15b0ccb5e17b30565b5980cdfb33d85ff7643202e512c6bd46748096f0bb31e64143c9e