Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
08-01-2024 17:11
Static task
static1
Behavioral task
behavioral1
Sample
4c01019ac7b5dfea10b7939fd3385419.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4c01019ac7b5dfea10b7939fd3385419.exe
Resource
win10v2004-20231222-en
General
-
Target
4c01019ac7b5dfea10b7939fd3385419.exe
-
Size
5.0MB
-
MD5
4c01019ac7b5dfea10b7939fd3385419
-
SHA1
bd0e176733c2673d0f6202f3324ee603ab3c1748
-
SHA256
cda307c345ff5824b575bc243d2026e1da428818801173e7fa7c04f1dfdde029
-
SHA512
5f16bfbd18d294396cce672099e4832fe303640af457be0ae74cd49e13dd791ec1afc51a7068aafb5473cc6dee638114608ce0f68cd81731b6a550fd010ae13a
-
SSDEEP
98304:3rO3DRFClOpaBcXHxb3ejc2pBn2IPzHzHOSNVWWjVqLYCskwc:bOVFCkpaBcXxbX2pBnDWWmDV
Malware Config
Signatures
-
Loads dropped DLL 53 IoCs
pid Process 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe 2196 4c01019ac7b5dfea10b7939fd3385419.exe -
Drops file in Program Files directory 2 IoCs
description ioc Process File created \??\c:\Program Files\baidubar\taobao.ico 4c01019ac7b5dfea10b7939fd3385419.exe File created \??\c:\Program Files\baidubar\qidian.ico 4c01019ac7b5dfea10b7939fd3385419.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Filesize1KB
MD56a67e38c6132682b6421a1234207d513
SHA1db182df87c50c918b351a0a7bc9c4cf088fdf598
SHA2566e52575c7718f53d5c40cab7133db73c115c6e5ad292c0a02efeb64e25736ac2
SHA512cdc17f0dcddb2baea8649fc5db23a336216dec1ead473dae3bfc9f6849213c1d8e6974af92cbfa0ecc5daee32fb5ba4e5cb3b841c21e0f79682329a111ed585e
-
Filesize
1KB
MD508297c1b75883cd5eec523f435df616d
SHA1745984b6f202d1ca0e975c97c4ab36d296f24b99
SHA256236397ce680623d3ca481b1a3f11b8535271eca868e9c6536e7b348cb4153acc
SHA512b9ffd2765f5b73cccbeaa0834ebac867fee2904d725ab2234ad7d6a6cbf1ea167894e234b8ea8c9e565cf22dc46a0824863dba29b97bed91925c97682b48e464
-
Filesize
1KB
MD50efe1829d835ecc46764832151fd2069
SHA16e2e5525797ea4f0eb94964e63670321d7c5bb12
SHA256f82ea98b1ffe870d287b22c41633694360f0b343fd7e50ae5d379c774464e92d
SHA51290c9d311c38af30162a3fee45038dc7eea101621dfab1eb7406eff8d51b0cc05eef51d97f5807f8b8e9d4813ce4ea755c322731c445ec446588256a3760c2201
-
Filesize
4KB
MD5073d44e11a4bcff06e72e1ebfe5605f7
SHA15f4e85ab7a1a636d95b50479a10bcb5583af93f3
SHA256b96b39cb4ad98f4820b6fd17b67e43d8d0f4b2667d50caa46eff44af245d75bb
SHA512e9f99b96334764ae47aa026f7f24cfb736859a9131bd1c5ec7e070e830b651787f49910911f82e4ade0dc62fea0ad54ba210b07e44830eb2be6abb710a418a98
-
Filesize
11KB
MD500a0194c20ee912257df53bfe258ee4a
SHA1d7b4e319bc5119024690dc8230b9cc919b1b86b2
SHA256dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
SHA5123b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667