Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 07:24

General

  • Target

    SPX Bundle.exe

  • Size

    7.0MB

  • MD5

    c47b72bd5976b82ba655159d0d4fa758

  • SHA1

    5d279ce61347f2dffa96466386a061597f378d9c

  • SHA256

    33ae2019c8495653b1e39d23a39f72074675676a9ea423ed6ae37de3b3574a13

  • SHA512

    b9c5b6ea3cae183efaa69c72ee976cec802253dbd392125f7e66dc80f1ab7e1f68184d964a84356155c11f4097895d172413011cdc510efb1d0390fb4259c645

  • SSDEEP

    196608:LFwLn490MFkxqcOe3aMVoPiBITTXhDMOxSviZXPkt5:LqLnG0fAcVaMVo9PXhDMZviZ/Q5

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SPX Bundle.exe
    "C:\Users\Admin\AppData\Local\Temp\SPX Bundle.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsd8039.tmp\ioSpecial.ini

    Filesize

    777B

    MD5

    a5f8e7ff08c29d0a731d6d355ecb5681

    SHA1

    958b782a17790589a7e605d4d67037c88e3233f5

    SHA256

    6f51aebafba106af51b8bbb061b3df20c8a1f6457df1a2d80c111065f716f9c6

    SHA512

    558731474a264604405b0ead52be82a254b12eede7d0fa1b7edcc6a913a6acc14083e75f569177b6f19f10ba560518f6e1ad0502ff495be1d567fdfc9146fdfb

  • \Users\Admin\AppData\Local\Temp\nsd8039.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    1e8f2fefe3ce893b117b26948b8978cb

    SHA1

    59cfc6c3f5716e91609e54ca80ae8b06c93ef8ab

    SHA256

    8203ae1589a50e6ff012e5d27bdd4f8ed7506077ca9b052827f5e90aaeb98519

    SHA512

    b3c36e1aa5d3ee5f482f4175a7d6fe10cf2bf3bd3423ab4266d11c4181cfbc7e3f66a30855034a8ec026a4d5987598f0116e98519b7445d9e5687bcbab2c0e5c