Analysis

  • max time kernel
    163s
  • max time network
    185s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/01/2024, 07:50

General

  • Target

    4adb8613256330a2bb1dddd12b20117e.exe

  • Size

    285KB

  • MD5

    4adb8613256330a2bb1dddd12b20117e

  • SHA1

    09be8ca7d63657c1faaa6482360b8e7aad9f6f44

  • SHA256

    05fbeed666880e13ebded94191f2cd40a2ae67644105291b9d97a66ed7639e50

  • SHA512

    a6e9761c72fa53269a5f72d84346b35aaab2b1b4dc452384f366f15fc90a3fe35d6d51faf85fbd642dd1a828f1212586637314110badcd438dea85a2748d407c

  • SSDEEP

    6144:rrkZ6Y0JQBkQRl7174NpNUM+UHs+OJXz/+7SKeqo9RfKP8QnGDYn:rrkZ63yRl1uqM+gs+Opz/TKeHw8g

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4adb8613256330a2bb1dddd12b20117e.exe
    "C:\Users\Admin\AppData\Local\Temp\4adb8613256330a2bb1dddd12b20117e.exe"
    1⤵
    • Loads dropped DLL
    PID:3188

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\ProgramData\InstallMate\124378F7\cfg\1.ini

          Filesize

          40KB

          MD5

          f2b28b165747468c88ef4e1df60a6601

          SHA1

          0515cb22048f232872251630c28b97bcb4f18dda

          SHA256

          be70bd6ea6c6c0779570a02324dc1fb8847a6202faf35efb9a189ef2f19138c4

          SHA512

          9b0abea9158437a8c5ff422b5debeaf7600611efc4b845dffb3098884d3a090ecf3449b66b4051a9e1319141096a5542f0b6ba9454960561bff85be0a3f303ed

        • C:\Users\Admin\AppData\Local\Temp\Tsu8CF30A52.dll

          Filesize

          269KB

          MD5

          af7ce801c8471c5cd19b366333c153c4

          SHA1

          4267749d020a362edbd25434ad65f98b073581f1

          SHA256

          cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

          SHA512

          88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

        • C:\Users\Admin\AppData\Local\Temp\{CA9A53C9-32FE-49D1-AB3A-7ADC1179713F}\Custom.dll

          Filesize

          60KB

          MD5

          10446c6f99ce92ee819753cc63a97c4e

          SHA1

          aa6756c32100426dc5a23c942cdee9a2ce9c6c33

          SHA256

          81fb2988da7929ee3f40c5973b43d63542089e37450c1341ec93f208746dd300

          SHA512

          7536a5baf8811a4e79be6e7b22c543064309c528e99c48de646bcbb49c63a83647a29a11cc43ff931498cfb9369a393d483cc6a70cfb0be4c4e6f018ddc0fe1d

        • C:\Users\Admin\AppData\Local\Temp\{CA9A53C9-32FE-49D1-AB3A-7ADC1179713F}\_Setup.dll

          Filesize

          149KB

          MD5

          51bffe605ebe13468951fb3769340470

          SHA1

          b19d0a1364493a8d979585b3b05222861d104478

          SHA256

          de0bcc86d24bfddef4444f1f4dfd05361d065fcf7c55f465eb20eb436cc54579

          SHA512

          52fa559cb70d4b54300c06981db97cd51281138d7200ef0d675557e524837cf3689b1c34a7d4a98e7247feacd3148fc0a0f57ebd0996726eec6d0671680de179