Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 23:56

General

  • Target

    20c503c484e99229556500b2605870dd.exe

  • Size

    1.1MB

  • MD5

    20c503c484e99229556500b2605870dd

  • SHA1

    9691c390ff911f3c06fc763acdd459a0503d562f

  • SHA256

    21fe00222e35f2577acbd61728d4d90d7941e9cbe1339c7da4a38a5516af536a

  • SHA512

    5ef225bdb937e5b12f81b97f19435ef4ad433fbed8e4653a1ea1e74e1e158f39732498ce3097758751d3b209b6b6bf51c76f9c03c122ef1b456ddaabd1742ece

  • SSDEEP

    24576:rWvknOMEfp5iIPLzT2V7I3bUlMgYqgAnscEGCBodGlwJ/3JZKa+y:rUeOMm/TPTG7IwlWqgAscEGCqoa+y

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 9 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\20c503c484e99229556500b2605870dd.exe
    "C:\Users\Admin\AppData\Local\Temp\20c503c484e99229556500b2605870dd.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Users\Admin\AppData\Local\Temp\a2IZunmB8Q\9cf56OCn\Setup.exe
      C:\Users\Admin\AppData\Local\Temp\a2IZunmB8Q\9cf56OCn\Setup.exe --relaunch
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      PID:2096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\a2IZunmB8Q\9cf56OCn\Setup.exe

    Filesize

    1.1MB

    MD5

    20c503c484e99229556500b2605870dd

    SHA1

    9691c390ff911f3c06fc763acdd459a0503d562f

    SHA256

    21fe00222e35f2577acbd61728d4d90d7941e9cbe1339c7da4a38a5516af536a

    SHA512

    5ef225bdb937e5b12f81b97f19435ef4ad433fbed8e4653a1ea1e74e1e158f39732498ce3097758751d3b209b6b6bf51c76f9c03c122ef1b456ddaabd1742ece

  • memory/2096-623-0x0000000000740000-0x000000000083E000-memory.dmp

    Filesize

    1016KB

  • memory/2096-843-0x0000000000740000-0x000000000083E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-0-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-1-0x0000000000400000-0x000000000051ED14-memory.dmp

    Filesize

    1.1MB

  • memory/2400-2-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-9-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-7-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-8-0x0000000000400000-0x000000000051ED14-memory.dmp

    Filesize

    1.1MB

  • memory/2400-10-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-11-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-12-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-13-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-14-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-15-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-16-0x0000000076F30000-0x0000000077040000-memory.dmp

    Filesize

    1.1MB

  • memory/2400-17-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-18-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-20-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-19-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-21-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-22-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-23-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-24-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-25-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-26-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-27-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-28-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-29-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-30-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-31-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-32-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-33-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-34-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-35-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-36-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-37-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-38-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-39-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-40-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-41-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-42-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-43-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-44-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-45-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-46-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-47-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-48-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-49-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-50-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-51-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-52-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-53-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-54-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-55-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-56-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-57-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-58-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-59-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-60-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-61-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-62-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-63-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-64-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-65-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-66-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-203-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB

  • memory/2400-852-0x0000000076F30000-0x0000000077040000-memory.dmp

    Filesize

    1.1MB

  • memory/2400-853-0x0000000000520000-0x000000000061E000-memory.dmp

    Filesize

    1016KB