Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 16:01

General

  • Target

    adguardinstaller.exe

  • Size

    113KB

  • MD5

    0e94a2e6330d0672630ad1ea8fda38b4

  • SHA1

    0f8e4b36aaa16a8d93974714a37d7b3755ece9ba

  • SHA256

    c5a8e6e9ed8bfc442ab26b9cca61784dc3d73a53925d040dbfac825310ba98bc

  • SHA512

    ad24db79d92f8144963c77b4aa6be7601dc121e9d9fee30b0170dc964094c0e4b935326cf0d91b038f1508e11c2e33f94fb14cf7dbae4c658faf3f44b9292eef

  • SSDEEP

    1536:PRKgf7E5VID6GnP3uAT1ob7t1mKvKC+CO1+kworWmavLe:Pg35m7nPeA8fmKvK9MkBrgLe

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\adguardinstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\adguardinstaller.exe"
    1⤵
    • Modifies system certificate store
    PID:1972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d483e28c9814b1220a4cddad3a431b7

    SHA1

    0204cc6113d627fb276765721912a9856d1a47c2

    SHA256

    ff75d1b670cbdc4b864f54cecd4403d4382d8f86d8b2d0c394db3d2c34df446c

    SHA512

    9500187e5c1ad7f4ee6550474f46b9530d87cbc2168ab663f7a703bd93f19aa97e139d9cd5eb7b0bf943f4182030485ee49a7cce063e458ef844765eabcd4d7e

  • C:\Users\Admin\AppData\Local\Temp\CabD136.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarD1F4.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • memory/1972-1-0x0000000000400000-0x000000000041E000-memory.dmp

    Filesize

    120KB