c25fba629a05e978fb1a181d2b4f5d6b376ec1b1cb1ae3f803651a37244ad51b | Triage

Analysis

max time kernel
146s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 23:31

Sharing

Report Analysis Logs

General

Target

06ffd44e8ecb6bd7a8ab71495a8e7fc7.exe
Size

79KB
MD5

06ffd44e8ecb6bd7a8ab71495a8e7fc7
SHA1

944ebc880287c99f6e2c81d2bfa3a5072785574f
SHA256

c25fba629a05e978fb1a181d2b4f5d6b376ec1b1cb1ae3f803651a37244ad51b
SHA512

b13d04e0c668f101ccef685a8e5f2322059771171bab328f855f6a919774370f507c95551ed2ddae63803b29ea8696ba458e707803b091e35855766a4321e1d8
SSDEEP

1536:/0qbhrad9YMtuiT+p//o3LB0ix2qc/H5:/0qb4Ww2ix5c/H5

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1484	06ffd44e8ecb6bd7a8ab71495a8e7fc7.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\shimgapi.dll	06ffd44e8ecb6bd7a8ab71495a8e7fc7.exe

C:\Users\Admin\AppData\Local\Temp\06ffd44e8ecb6bd7a8ab71495a8e7fc7.exe
"C:\Users\Admin\AppData\Local\Temp\06ffd44e8ecb6bd7a8ab71495a8e7fc7.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\SysWOW64\shimgapi.dll

Filesize
6KB

MD5
d183da3b0d11df59383eac7fe64f99bd

SHA1
d4b2aa94857ecdbd5be9579102ae5b89de023a5f

SHA256
f9088ee838188cab6e6687dd9300209bcf91e77c47daaa7223375e75cf60db50

SHA512
ee82c32d1b3e65e041d7ce68c8e4f05c3eef06fe5c6aa5fceb91ddcf4bcc6000747b949446232e889aa243c87e16a827b79afb121c00f808244bae2ca24383f4

Download Submit