Overview

overview

7

Static

static

3

39b3519799...87.exe

windows7-x64

7

39b3519799...87.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 19:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    39b3519799651c3a4c541154a0c4f487.exe

  • Size

    3.0MB

  • MD5

    39b3519799651c3a4c541154a0c4f487

  • SHA1

    5bf39b66df210c5f6cb97a7c35c97abbaeab575a

  • SHA256

    7369aca34c1e56501c8771e6e504e9334af1dd5d8080cf379d6bf1901ce9033e

  • SHA512

    06a7b5afae5a5be5873bd00e5ad0524073e155770f085ed3fc66e8ccf79c162997020a25c8317b4b427c412096bb72ea694d470337f4e4ea21d31f9ded1fec60

  • SSDEEP

    98304:gk4gyY1nreB41lPyO37TLN1aavvKScI1iBXwJ8:gkXyYpyB43PLvAXU8

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\39b3519799651c3a4c541154a0c4f487.exe
    "C:\Users\Admin\AppData\Local\Temp\39b3519799651c3a4c541154a0c4f487.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nso649.tmp\ioSpecial.ini
    Filesize

    701B

    MD5

    a16778eabeddeca74fa141fcd9730394

    SHA1

    aa28eb386f490a3c465b8d9c66810ac61fccba88

    SHA256

    2d5566becaf353a81d4ea9f4368f89234232a8f71aa06c83a4f465debe24bc4c

    SHA512

    09a6acd99fbcfa802d0cc56a828c08cf76f48696f4491189408d871a260af25496dbe9e873fc4d2c840a4a0a52372f56edadccde682d4053196f2a32d96d8b4a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nso649.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nso649.tmp\System.dll
    Filesize

    9KB

    MD5

    e085476805e8f5ef1c7ed635c5309017

    SHA1

    609e79fdc29d6dee40cc5dd333094db5f9f63eec

    SHA256

    4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

    SHA512

    082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

    Download Submit