Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:15

General

  • Target

    00332cb9e549a3151505b7ce5b246118.exe

  • Size

    9.4MB

  • MD5

    00332cb9e549a3151505b7ce5b246118

  • SHA1

    46fba1780a40a3cd79c68d13417bd241ad28acc9

  • SHA256

    302dc3bfba06f57eceff7ce7b7819d48a7baef163bc44723f5c5a74b8fdd7dda

  • SHA512

    0f690d91549e825a32878a54721bc9f08d88aec9c37c248e9719770fa0710c7b1a7919e20741887fffdade9640d9627c6ac1ba25b86f112fd0946553e4cf56df

  • SSDEEP

    98304:AR2ESEubDm0VAaIMcxwY2sajeBiqVmrgq8no:spuGzaZI7zzmMno

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 6 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\00332cb9e549a3151505b7ce5b246118.exe
    "C:\Users\Admin\AppData\Local\Temp\00332cb9e549a3151505b7ce5b246118.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

    Filesize

    3.0MB

    MD5

    1e170fbfc501cbd8bfe973b8811898ec

    SHA1

    a1b1b7b52e9ebbf0d2728037ab9e78b77ac9fdeb

    SHA256

    527463b70c57ea73fd2c5ba38a92592d0f2b91ca5fb17121e98b94326aa53ce5

    SHA512

    6d8cd65ea128cee6887d99b4abf1983d6978219c47353cf9928d3fc7e1918af1b2ca1b2840df10e32781f11d09c57fe2c52b77f03acfc6ac8ba5a11cb6a4cf5f

  • C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL

    Filesize

    5B

    MD5

    b5b682b742431a52ea8b17c72ad9c572

    SHA1

    326320f469235708c59f678c9a7357dca552d306

    SHA256

    30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

    SHA512

    4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

  • memory/1720-0-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/1720-232-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB