Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:37

General

  • Target

    21a6b774b48e67a944ea91e69324e226.exe

  • Size

    801KB

  • MD5

    21a6b774b48e67a944ea91e69324e226

  • SHA1

    ac991ed741936d43f6a56185ef5515459ca90926

  • SHA256

    bb837bf88b88375823928c21a613999f1a5c6d88f26eca305c5f880142ecd8cb

  • SHA512

    f2d43dc8ac82c37f5a0e0cb617939da9e2f4f3ff0ef282fd64addbf67146dbd629e22e0a1c90d9a6a371897c505ce9034d937019bd598b49bfafcbbf5bb02362

  • SSDEEP

    3072:MGjhaq5iL0beJQZt32wLji5DlsODxRPNDkjmHzW9hUd56JsuBSjwGPmO12i1Dzbe:Hha8iAx+1zwjmHd6vB/jO11zbZWZ

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Drops file in System32 directory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\21a6b774b48e67a944ea91e69324e226.exe
    "C:\Users\Admin\AppData\Local\Temp\21a6b774b48e67a944ea91e69324e226.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in System32 directory
    PID:2416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\AVSCANNER.EXE

    Filesize

    811KB

    MD5

    eb147f6789ff000dd8aa8f7e4dd29b2b

    SHA1

    db4ea8cc83b8bee11351a15420c93a2673f794fe

    SHA256

    05e4bf515c356134241443e5f32f1c9a06e624a024a50044470321526d243701

    SHA512

    036d6a2edefb5edf09776473a653582e195b45609a3614dd0adb0af4b2a6e2fac37a6567daa9fb19694080e655cb0a3204be2af05d928a436a2c0c3460d95303

  • memory/2416-2-0x0000000000400000-0x000000000044C000-memory.dmp

    Filesize

    304KB

  • memory/2416-7-0x0000000000400000-0x000000000044C000-memory.dmp

    Filesize

    304KB