Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-01-2024 16:08

General

  • Target

    4ec2486825014dee1470c86e7b0285b1.exe

  • Size

    297KB

  • MD5

    4ec2486825014dee1470c86e7b0285b1

  • SHA1

    fc1c660abff0898ded42ae051f9e593087a4e350

  • SHA256

    eac00b17869b0c329bd13d2aff0f33d0105ef6ba02062cdcc9a077e3b52d7902

  • SHA512

    76b3d234a713de8e6ce6030d1c2e56eb9b8055c8eb5f68f8de67f625f8409b4774fbc336d80a0daa3bedda602104b33397cae90c694724027fa570db1e28f134

  • SSDEEP

    6144:OgsX5w78W1xrLitFHIp1TP6IUIJxgSQZf3AEfk3COjB8tgnFKzEsTh5/V1lj:OgU5w7dxv6FH6l6IUFvA0iCOV8tWM7T9

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4ec2486825014dee1470c86e7b0285b1.exe
    "C:\Users\Admin\AppData\Local\Temp\4ec2486825014dee1470c86e7b0285b1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:4844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuD611D6BC.dll

    Filesize

    32KB

    MD5

    538265b238faf59ffdb15bc56e062cc9

    SHA1

    3d19bbb978fe731f8eb64f4f7b90c17f57ae94b3

    SHA256

    9a535b9170f8d9dcb73a091efe3361215f3019abda98c591cc49590f4090c4de

    SHA512

    e3e4e4d4b630d564d0fb95a53fac7c1c3081c77b27a0da9b1e7b255228f322ae3008ab8c5e71717c230a4617cbe0598aaeef4a14681adddb5549e6ba2c68a18d

  • C:\Users\Admin\AppData\Local\Temp\{61A1AEB8-267C-5B67-B98C-6E5EBA428C4E}\_Setupx.dll

    Filesize

    32KB

    MD5

    6effd7d795f2596e4603ce7265e5d3d1

    SHA1

    81b759b3dd388ccfe8e104803309423e46d22fc9

    SHA256

    217468f1d433931e1ee6fe36ea8c9c12528a381632de659f86a0f68f831e646c

    SHA512

    3b881ecf148c6c7b8c3722c4770fd3a5a6bc1dadffa14d8dc224e9105c2472cb850e68d79ac814c7d18734017b0e46dde7145021cb72384d88acb8c3a930803d