Analysis

  • max time kernel
    142s
  • max time network
    159s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 07:22

General

  • Target

    1207fe7699a40a1f2f5d66b081f68805.exe

  • Size

    153KB

  • MD5

    1207fe7699a40a1f2f5d66b081f68805

  • SHA1

    9593417403c2d058c6eb044f5188dff46337fb13

  • SHA256

    98de63061dd39994b48e2d4bc75496a5618612d43b69284feee47cfae166055b

  • SHA512

    5811b8602de3025d448395ccca33fa2c00c47e189bcea91237a49a1aad33933dce5cf0e8d17102dd62f3eabfc56845d1499d6cce8aa689e2fee3b6818761fb2c

  • SSDEEP

    3072:z5C6GCxZt4qKj28KeViyvevgmCou9wPcwzH8AGRzbXfQcsYFRu9:zU6xXlXUhouolzH3GtbvQc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1207fe7699a40a1f2f5d66b081f68805.exe
    "C:\Users\Admin\AppData\Local\Temp\1207fe7699a40a1f2f5d66b081f68805.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\x1c27802.dll

    Filesize

    362KB

    MD5

    5b0940c4f294a10bdd90f7e62baf5e55

    SHA1

    7211c268043ad14e5c5bbf2c2359aa5f6cd64c85

    SHA256

    9cfa7b7f6db8d2e2ad92a2b4e19bb991618e573ba6df426d409be0065638eda8

    SHA512

    fb718e9e341039d0291390d5c1119f4d629728f2e03cf4bdec4f35caf7770550b0387cd028f0c87b853e4f9f7cbb7125988d2a9146df06427e609cbc02bfd212

  • \Users\Admin\AppData\Local\Temp\x1c27802.dll

    Filesize

    280KB

    MD5

    93012915a972662a2a2ee3a45c897cbd

    SHA1

    a85dbd4b60a9a14477505f896055042583964d99

    SHA256

    d6b2a753452a71fcd5685143a40262e7f3ebba4cb5cc7c864f03c007cbc1b835

    SHA512

    e5ebdee419ff114e1deadfee0ea55d550ac07ee200b9b800e88d389ed78c9e56c93d6998c66cf4b4313871edbb41995ee055abe72695fea54959e1fe98297dd4

  • \Users\Admin\AppData\Local\Temp\x1c27802.dll

    Filesize

    339KB

    MD5

    aa5990a3c6caa3e2cc806864b538ae6f

    SHA1

    e725ae57b5331fb59d625251c41c29fc56ddfc40

    SHA256

    74775550c0bb6bbb637021467ade97e48a1263a4c07dbe5c94693f9311ed5de6

    SHA512

    4270c5bc60f18518b70d464b483e5537268e5595aa5bce4a3e8a37eb40d0e19c4772fb14c3aea5bbfc0163e65f6f3d3607c5d1dbb3cec8c56832080bd710f58f

  • \Users\Admin\AppData\Local\Temp\x1c27802.dll

    Filesize

    411KB

    MD5

    723c64c770923648adb8af54ff3621a5

    SHA1

    22a7d154f8176d435d08de24319c52b22e64167c

    SHA256

    5586c730cee59d6818755ff32396b41fab290021e99fc584357e8757b860d1f5

    SHA512

    2bd266131c9ec51e8858f24cc77b047c71ea6e72da8d246fd5a804c7a0d1b700a748cc992e7cdd7e71a3afb0124139e283ebf3126f7796857d69a3b856ef8665

  • memory/1936-8-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1936-10-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1936-12-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1936-14-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1936-16-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1936-18-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1936-20-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB