Overview

overview

7

Static

static

3

4a5abd19a0...4c.exe

windows7-x64

7

4a5abd19a0...4c.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 03:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    4a5abd19a0053d5c117a147260b3464c.exe
  • Size 19.7MB
  • Sample240108-ebnaraaeem
  • SHA256 cfc3fa62f4876729e7974c4bcea136ef71b82a13ca8b943323b22ca91dcebd19
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 14 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a5abd19a0053d5c117a147260b3464c.exe
    "C:\Users\Admin\AppData\Local\Temp\4a5abd19a0053d5c117a147260b3464c.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:808

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        DRPC.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\DRPC.mfx
        • Size 224KB
        • SHA256 f65e50d077e61cf56a0d97f3bc38d0bcff40aefd87168ecc37924a175e5fba87
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Easing.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\Easing.mfx
        • Size 181KB
        • SHA256 d0409d7558ef6b61574f5907179fd77e8b41553be0a588940243ffa2d1cdf9c2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Perspective.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\Perspective.mfx
        • Size 24KB
        • SHA256 42285d953d9688e2d44f3b2a11d78b6a97ad3a26ed8042ab3a98527678e82bba
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        clickteam-circular.mvx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\clickteam-circular.mvx
        • Size 32KB
        • SHA256 9a183874704d397cab0b382ef35293633f7b351fa92eb44249bb01f9081d3201
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        kcini.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\kcini.mfx
        • Size 40KB
        • SHA256 9bca9190468b2ac34a3fd07d59972a0db8a521a733c1102d75bfcd43b4706ccc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        kclist.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\kclist.mfx
        • Size 52KB
        • SHA256 03ae06701687988bd401951961175ea28e3f20ea3d07a8901ed75ca0aed6e040
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        kcwctrl.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\kcwctrl.mfx
        • Size 45KB
        • SHA256 4d5cf4b3ad0ef3178b1ef44ec6daf150847a5dfdc41705407e0b6c48963b5a4d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        mmf2d3d9.dll
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\mmf2d3d9.dll
        • Size 1.5MB
        • SHA256 bddda991185a9e83b9855a109f2fcfa78cd2d5402e9db344c6ec77f6ce69a0c5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        mmfs2.dll
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\mmfs2.dll
        • Size 768KB
        • SHA256 763ef4484ba9b9e10e19268c045732515f0ac143cf075e6d1ea1f5adcc77633b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        mp3flt.sft
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\mp3flt.sft
        • Size 24KB
        • SHA256 81c9a9459a8e124793addf142cd513945d6fe600e1d67f74897898d7570e56b2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        oggflt.sft
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\oggflt.sft
        • Size 130KB
        • SHA256 9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        txtblt.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\txtblt.mfx
        • Size 116KB
        • SHA256 2aa0648b598998286ec19139dcb0d674b34763072ed4d61b8abcc3d76a5f4dd9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ultimatefullscreen.mfx
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\ultimatefullscreen.mfx
        • Size 86KB
        • SHA256 111c61d9e54b037a2c492b89cf6a82c62f81712fb9fd64a91c9dfc9486887349
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        waveflt.sft
        • Path \Users\Admin\AppData\Local\Temp\mrt5496.tmp\waveflt.sft
        • Size 8KB
        • SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/808-35-0x0000000002730000-0x0000000002943000-memory.dmp
        Download

        memory/808-23-0x0000000000170000-0x00000000001A3000-memory.dmp
        Download

        memory/808-48-0x00000000004E0000-0x0000000000504000-memory.dmp
        Download