Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 19:55

General

  • Target

    025de082ba47b7ecadfc141cc7f234ac.exe

  • Size

    5.3MB

  • MD5

    025de082ba47b7ecadfc141cc7f234ac

  • SHA1

    adff6ac5c86d0adc3e52ef13bab35a7dcb6edfe8

  • SHA256

    a9fa357447186f9c23b5e5e97938f96d88ae892951b987af06e4a32fb0bbdfc9

  • SHA512

    4aa2a1dbbe24098bb618b471ffa51ab397d6955cf778d6508367d0859ec989a58ff2dade5cf16ef66e7feedd08adb2c260677628a8898c58ed38cbab7b53e135

  • SSDEEP

    49152:2lYvoGxUSJpXDd3334igWb2n8yIyiVPh74Gzqmf6aGgKqbvshL5lB6APyP9fnvG5:2sRXDd3334LXrwVegbk5yhLMj/H

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 6 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\025de082ba47b7ecadfc141cc7f234ac.exe
    "C:\Users\Admin\AppData\Local\Temp\025de082ba47b7ecadfc141cc7f234ac.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

    Filesize

    2.4MB

    MD5

    da53794164b12dbb528f868398218e1e

    SHA1

    6aff17687f8550813a748670be08b50cefd811ef

    SHA256

    f09cba0b19ad8523694ebde843f2e7615536ad30cf4d7139b1473f35d12c34f8

    SHA512

    4b6f2af27c78a6a590f886352d7679d9ea3b376e0fbc71cf6cd40325c0e8ad1f75e7c75d1b6cc65218c470ce3039a1711e94bdbed6a3ea35a9176724d9ec8c26

  • C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL

    Filesize

    5B

    MD5

    b5b682b742431a52ea8b17c72ad9c572

    SHA1

    326320f469235708c59f678c9a7357dca552d306

    SHA256

    30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

    SHA512

    4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

  • memory/2232-0-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2232-27-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2232-138-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2232-205-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2232-206-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2232-237-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2232-243-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB