Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
02/01/2024, 00:14
General
-
Target
picsaver.exe
-
Size
2.2MB
-
MD5
1c3ce4c28636d90832de70fb9c102a20
-
SHA1
4678dbd5489e52b8a3db7f8e2aa1d110a887fd74
-
SHA256
154e4323ca12f95e78b0e024e4cb798cbcf83290ce2541900417bf35e69918a4
-
SHA512
b4d8abf0bf66af90607ff628e0ea7fcb8e55f5f4032e0729a34a1f92ee48e5fcf7df20328286571100034c63d73ec8f8fa4142cc8ddf491da749753b6f870a3b
-
SSDEEP
49152:6NSIld9NgD0hxC5PhE/tyYsbk7dsXa2xjVaomdk8N8pd285h:VIld9vhz/tNsARsXH9VaBq8YXh
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Drops file in System32 directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\picsaver.exe"C:\Users\Admin\AppData\Local\Temp\picsaver.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
161KB
MD5315f8d68ff1a414806e7344ac8dd8b6d
SHA18fe6719bdf12244e8ef154e36c77ec487dbafeff
SHA25690b9dfcb65f6e6cd0123f44cbf8310659f4c7ca4488a57d3045f72d55a9771e9
SHA51295a5efdaf8f620f85838be6eb59768a421059595c1e07dd6680aac3bfd371075f1c9528cb2dceefb333c72ed6821a6e592ca7d16e2923f39212a0e1ffdba296a
-
Filesize
33KB
MD5a6601202dda81c941e14dd79878ca61d
SHA1a436aa8bd1d6b501d30f01c4587fb32d513038f4
SHA2567906a8f868986edda9f7c4df0d93ed862959b81344a475f452b9e31c1aece464
SHA512c27d32541f21e0a5aa45939855d4cddfec04ec466a1231d419b29cf07157751bf778ef851868181a0392fbe6ddcabf372b7a2d35519b5b3a2bda21ff7192a5b4