Overview

overview

7

Static

static

3

132b8f12ee...31.exe

windows7-x64

7

132b8f12ee...31.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 08:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    132b8f12eee6d4d6057f58f775e67e31.exe

  • Size

    4.7MB

  • MD5

    132b8f12eee6d4d6057f58f775e67e31

  • SHA1

    4fcf8c346c77a41ff265fe609e3afa6fff960167

  • SHA256

    d2799e2e86dad4b6f6e7b6abe7a519f2c19972cfdfa89b346f290d1febb26867

  • SHA512

    07ebc53c9417adfe66f7086e6e6cd5efb150b115e543335fdf7871991d5de33ae757c6829a332b3dc68d0f313ddc9588e1ceeb8a33e59468962ea1f953e6df2b

  • SSDEEP

    98304:YoGadC5ctobfXOG/dIHc1KQqBxOZr542BwhshROi5HNQ/56r/RnqgWYKf:YjPfOG1IHfBa624QQ56LxKf

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\132b8f12eee6d4d6057f58f775e67e31.exe
    "C:\Users\Admin\AppData\Local\Temp\132b8f12eee6d4d6057f58f775e67e31.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsy89D9.tmp\ioSpecial.ini
    Filesize

    702B

    MD5

    fe5ef1c51ad76650a9da14d702e477d2

    SHA1

    94ee429dca1138312148cc89d43b6b9279a20450

    SHA256

    6d6ef8caef8ce7b3229ca457e1846a958716661ddebba7fac3cf6d7d926ff414

    SHA512

    327481c91361b01012ca665ead71ec1b458d3346d1ef99d0bf7ad8025bf973fece7c316b3969d60ab043d47cb9a96e36aaa71035a288144508dc36dddb828f8d

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsy89D9.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsy89D9.tmp\System.dll
    Filesize

    9KB

    MD5

    e085476805e8f5ef1c7ed635c5309017

    SHA1

    609e79fdc29d6dee40cc5dd333094db5f9f63eec

    SHA256

    4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

    SHA512

    082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

    Download Submit