Overview

overview

7

Static

static

3

0ba2b56cab...e2.exe

windows7-x64

7

0ba2b56cab...e2.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 02:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0ba2b56cab43eac8cf6d281a14e06ce2.exe

  • Size

    297KB

  • MD5

    0ba2b56cab43eac8cf6d281a14e06ce2

  • SHA1

    0920a6d274f06078877f91c838268c3be40f91b2

  • SHA256

    21b5a79d3450fd8b0b98f5f0dfbdb4a64b01aab31b7b5dddf4a8b5a4c56ffbd2

  • SHA512

    77b97f59709a2179939868d4f491683bebf0cb4d6590f54a31c3a900dba9927d6015352e1275422f8ea1a45f9e464b99a95984f86fede9ca3c72cec459f7b1c1

  • SSDEEP

    6144:OgsX5w78W1xrLitFHIp1TP6IUIJxgSQZf3AEfk3COjB8tgnFKzEsTh5/V18j:OgU5w7dxv6FH6l6IUFvA0iCOV8tWM7T4

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0ba2b56cab43eac8cf6d281a14e06ce2.exe
    "C:\Users\Admin\AppData\Local\Temp\0ba2b56cab43eac8cf6d281a14e06ce2.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:3044

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\Tsu9B109B1F.dll
          Filesize

          71KB

          MD5

          a0edb27728422f9252653bc4d0a3239e

          SHA1

          98c38b5576c6753c26e7c59525355580c6b0b5e6

          SHA256

          60df356e4d79d0b526f6c9f5ee420775178ca37320b67fe7df0a8fb27ff285c5

          SHA512

          81d6870b66f3e47302e84368f0fbb19d523678b24c92f3809a239a5711508836df8ba95ccf701c573a7972c3eb6b68e892c8f00355edb4d7c6052c6c86a1f7ea

          Download Submit

        • \Users\Admin\AppData\Local\Temp\{B6B655C3-0AA2-B109-53E2-42806D557735}\_Setup.dll
          Filesize

          206KB

          MD5

          a86aa410fb6cec9f140fb7fd12882be9

          SHA1

          c79c4159ad05ee31aeef9b6bbd505d96f41e1fac

          SHA256

          a3903f89d8eef0cc9c365a2db4fca0ca1f0654390f182b44e7769454c1aab974

          SHA512

          70d689077d29ba8138968551b87be405db42c05b547ef36217bc64b548bb41a281086cf02828b9cbd8925e2fda598606c41129b8fd3c7f2e0b630b4188ea800e

          Download Submit

        • \Users\Admin\AppData\Local\Temp\{B6B655C3-0AA2-B109-53E2-42806D557735}\_Setupx.dll
          Filesize

          42KB

          MD5

          66e0d3cb3825b658880be576875795bc

          SHA1

          740982ce3b3e4bd08c1cbd5fc8cfeb982f1d4e05

          SHA256

          27b7921fbbd360bf77db65a50b2cd9a600e6baaaf77fd60eee74476d9fc6c7e0

          SHA512

          23873b2052f66d3b5961cfd5ca26d4d3f507cbd0317116e6b773d23defe47c164e1040fb56392f17cd2644528c64dfbfdeccc46e1965a650786414c8f8f74c7b

          Download Submit