Overview

overview

6

Static

static

3

4726df02c0...d5.exe

windows7-x64

5

4726df02c0...d5.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    14s
  • max time network
    173s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06-01-2024 20:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4726df02c033fd5a1a0bba8de4ae42d5.exe

  • Size

    134KB

  • MD5

    4726df02c033fd5a1a0bba8de4ae42d5

  • SHA1

    e7a488c997de9bab42ca057c9a5ed2c34a2a36bd

  • SHA256

    bee575ab0030b49d32c268d85ada5534143d2894a9e5a928456fc5551a666d14

  • SHA512

    6cefdbe7ed9b9eb870bd451668417803a2da4af1e9785bc941766f126c1946465f42e3b300961a73d62358cb9caa38de035ff29afcdd9bde21ec1d2ebd6967e7

  • SSDEEP

    3072:Eor4EqPU81j1CQcJ5bOeEElLIYe7bzQxWk6+aljgBPb:Eor4PnR1/cJBEElC7PQDue

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4726df02c033fd5a1a0bba8de4ae42d5.exe
    "C:\Users\Admin\AppData\Local\Temp\4726df02c033fd5a1a0bba8de4ae42d5.exe"
    1⤵
    • Drops file in System32 directory
    PID:2648
    • \??\c:\program files (x86)\windows mail\en-us\systemwinmail.exe
      "c:\program files (x86)\windows mail\en-us\systemwinmail.exe"
      2⤵
        PID:2112
      • \??\c:\program files (x86)\microsoft sql server compact edition\v3.5\sqlceqpsqlceqp3.5.5692.0.exe
        "c:\program files (x86)\microsoft sql server compact edition\v3.5\sqlceqpsqlceqp3.5.5692.0.exe"
        2⤵
          PID:2968
        • \??\c:\program files (x86)\windows nt\tabletextservice\es-es\windowswindows.exe
          "c:\program files (x86)\windows nt\tabletextservice\es-es\windowswindows.exe"
          2⤵
            PID:2724
          • \??\c:\program files (x86)\windows mail\de-de\winmailmicrosoft.exe
            "c:\program files (x86)\windows mail\de-de\winmailmicrosoft.exe"
            2⤵
              PID:2620

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\CabCDDC.tmp
            Filesize

            65KB

            MD5

            ac05d27423a85adc1622c714f2cb6184

            SHA1

            b0fe2b1abddb97837ea0195be70ab2ff14d43198

            SHA256

            c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

            SHA512

            6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

            Download Submit
          • C:\Users\Admin\AppData\Local\Temp\TarCE0E.tmp
            Filesize

            171KB

            MD5

            9c0c641c06238516f27941aa1166d427

            SHA1

            64cd549fb8cf014fcd9312aa7a5b023847b6c977

            SHA256

            4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

            SHA512

            936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

            Download Submit
          • memory/2112-156-0x0000000000230000-0x000000000024F000-memory.dmp
            Filesize

            124KB

            Download
          • memory/2112-160-0x00000000002B0000-0x00000000002B1000-memory.dmp
            Filesize

            4KB

            Download
          • memory/2112-324-0x0000000000230000-0x000000000024F000-memory.dmp
            Filesize

            124KB

            Download
          • memory/2112-283-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2112-159-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2112-157-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2620-446-0x0000000000230000-0x000000000024F000-memory.dmp
            Filesize

            124KB

            Download
          • memory/2620-397-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2620-325-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2620-327-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2648-2-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2648-5-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2648-1-0x0000000001BB0000-0x0000000001BB1000-memory.dmp
            Filesize

            4KB

            Download
          • memory/2648-0-0x00000000003B0000-0x00000000003CF000-memory.dmp
            Filesize

            124KB

            Download
          • memory/2648-3-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2648-62-0x0000000001BB0000-0x0000000001BB1000-memory.dmp
            Filesize

            4KB

            Download
          • memory/2648-61-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2724-359-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2724-286-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2724-284-0x0000000000230000-0x000000000024F000-memory.dmp
            Filesize

            124KB

            Download
          • memory/2968-230-0x0000000000230000-0x000000000024F000-memory.dmp
            Filesize

            124KB

            Download
          • memory/2968-336-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2968-231-0x00000000002B0000-0x00000000002B1000-memory.dmp
            Filesize

            4KB

            Download
          • memory/2968-232-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download
          • memory/2968-234-0x0000000000400000-0x0000000000449000-memory.dmp
            Filesize

            292KB

            Download