Overview

overview

7

Static

static

3

397dc2ab8a...90.exe

windows7-x64

7

397dc2ab8a...90.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 14:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    397dc2ab8a412074047b042b63c5ec90.exe

  • Size

    1.8MB

  • MD5

    397dc2ab8a412074047b042b63c5ec90

  • SHA1

    7675f2afdd690d236762bcdc11230ce3861dccf5

  • SHA256

    0af69e865bbdfe7fb3a9ecefdedb27146ab5f304fd653661f9cdc9d29a9a43b9

  • SHA512

    3583ae3221027bdf576ed3fe26f3a1c46c02a9ac3d62dfc628a28526108ab773fcafcfe73499a7d9ebd45526086f2d091787bc13e293b76efe46d2770f7eb28d

  • SSDEEP

    49152:0go1wrWO+Kzb7RX3/mIo1C6ROyvGoi+GFV1braz624OPaBjLkKB30u:0ZyR+mRX3/mIGp6Vl2vPaB0KVf

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\397dc2ab8a412074047b042b63c5ec90.exe
    "C:\Users\Admin\AppData\Local\Temp\397dc2ab8a412074047b042b63c5ec90.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nso65F5.tmp\ioSpecial.ini
    Filesize

    633B

    MD5

    859907a5c228fd63b3a0ec288f50577e

    SHA1

    0e2766655a0d642a58aea5cb35fa9369a2fb1c32

    SHA256

    43ac9e5e73c0c38a1073d86dc3b37c9159a723f546d952c9ea957675360005b6

    SHA512

    b73b63a6b1214e75b8326a6ed3e56196bad0e5fe7f9183bddf6aa60b1a286a4b7c7f9381ef95c2011c0f31f68d7bb96471f986f74982ffecfe8558e7683e7816

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nso65F5.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    07f3b3445f66e1089567796bf3c8be78

    SHA1

    851eb574c1067b23a654f8aa47b17ef599b24d1c

    SHA256

    a505e6c537a5ce0166227dda9f7671605395592ac9f1a3764e8a01b713939db1

    SHA512

    8c56308fff3a947b26fd0d98dbdd96c406ddf967f5d7abee8cba082b6c46a4e575094bb0bb981551ac5160bb5089cf6fb125dd17a659c427e28c07402adab1c3

    Download Submit