Analysis

  • max time kernel
    145s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 08:16

General

  • Target

    132b8f12eee6d4d6057f58f775e67e31.exe

  • Size

    4.7MB

  • MD5

    132b8f12eee6d4d6057f58f775e67e31

  • SHA1

    4fcf8c346c77a41ff265fe609e3afa6fff960167

  • SHA256

    d2799e2e86dad4b6f6e7b6abe7a519f2c19972cfdfa89b346f290d1febb26867

  • SHA512

    07ebc53c9417adfe66f7086e6e6cd5efb150b115e543335fdf7871991d5de33ae757c6829a332b3dc68d0f313ddc9588e1ceeb8a33e59468962ea1f953e6df2b

  • SSDEEP

    98304:YoGadC5ctobfXOG/dIHc1KQqBxOZr542BwhshROi5HNQ/56r/RnqgWYKf:YjPfOG1IHfBa624QQ56LxKf

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\132b8f12eee6d4d6057f58f775e67e31.exe
    "C:\Users\Admin\AppData\Local\Temp\132b8f12eee6d4d6057f58f775e67e31.exe"
    1⤵
    • Loads dropped DLL
    PID:3892

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\nsf47B8.tmp\InstallOptions.dll

          Filesize

          12KB

          MD5

          4c7d97d0786ff08b20d0e8315b5fc3cb

          SHA1

          bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

          SHA256

          75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

          SHA512

          f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

        • C:\Users\Admin\AppData\Local\Temp\nsf47B8.tmp\System.dll

          Filesize

          9KB

          MD5

          e085476805e8f5ef1c7ed635c5309017

          SHA1

          609e79fdc29d6dee40cc5dd333094db5f9f63eec

          SHA256

          4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

          SHA512

          082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

        • C:\Users\Admin\AppData\Local\Temp\nsf47B8.tmp\ioSpecial.ini

          Filesize

          702B

          MD5

          4b9de02e701e5d8ee6d7eb57a498f47c

          SHA1

          056ed72b1527b169e31ee01dfb43aedbd888bef9

          SHA256

          ebcd60ff0eb45d4d0861bcaa13da4f1aac63bba48721fad765064472d004fa29

          SHA512

          b5af964033d739b6fa2d4a466c4749c5b102b29e2e5b4b305c62bc76b86a6c765c00d81ce2aa5323cb14353c40e1e0fb3bbe85a4b33ab3b3a624db3b87124f88