Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/01/2024, 06:48

General

  • Target

    5a900bc2d921150fcc673ffe1fee509d.exe

  • Size

    307KB

  • MD5

    5a900bc2d921150fcc673ffe1fee509d

  • SHA1

    436b765fffa91be4d97112239419cc5220f8fd0a

  • SHA256

    21b1db0cef249cc842ac8fb4559b5475f7f2823f139f75b61196af81128e7ef8

  • SHA512

    fd4657a2e83ed3df781415f712f215eb260255459f8a84764dd82c2014cfc23a3699c8569f36302a2e4563f189fc669ffa7a8b938e37aa9a900326d412e55e3e

  • SSDEEP

    6144:6r4m9uEo2S1YnQmCX492DkwNP3qpYFe3/yR1eRPjwfsf:6r4+u6/eIo4D3/yR1eRrwfsf

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a900bc2d921150fcc673ffe1fee509d.exe
    "C:\Users\Admin\AppData\Local\Temp\5a900bc2d921150fcc673ffe1fee509d.exe"
    1⤵
    • Loads dropped DLL
    PID:2624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\ProgramData\InstallMate\E3FC36B2\cfg\1.ini

          Filesize

          40KB

          MD5

          f2b28b165747468c88ef4e1df60a6601

          SHA1

          0515cb22048f232872251630c28b97bcb4f18dda

          SHA256

          be70bd6ea6c6c0779570a02324dc1fb8847a6202faf35efb9a189ef2f19138c4

          SHA512

          9b0abea9158437a8c5ff422b5debeaf7600611efc4b845dffb3098884d3a090ecf3449b66b4051a9e1319141096a5542f0b6ba9454960561bff85be0a3f303ed

        • C:\Users\Admin\AppData\Local\Temp\Tsu37632834.dll

          Filesize

          269KB

          MD5

          af7ce801c8471c5cd19b366333c153c4

          SHA1

          4267749d020a362edbd25434ad65f98b073581f1

          SHA256

          cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

          SHA512

          88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

        • C:\Users\Admin\AppData\Local\Temp\{E2AC2ACB-46D6-41B8-A353-0EF4394F083D}\Custom.dll

          Filesize

          63KB

          MD5

          22fce31f661e1579bfb269ed237ad190

          SHA1

          ca48ceea2bfabb67dc19e680d30d42009ad90496

          SHA256

          c31d0bb45fbc4d8e2e27b315a93d28945b010689ca893d6d650d1120f82c3897

          SHA512

          8db85ea1263763cee108c54a4bf302512fae83f24847cc2a715b0494b3e6c7029bc784582956bdc5e1a9606ebfa48c28edc4262ada671ee646fa4b8b30a2ae21

        • C:\Users\Admin\AppData\Local\Temp\{E2AC2ACB-46D6-41B8-A353-0EF4394F083D}\_Setup.dll

          Filesize

          168KB

          MD5

          cd8fc5bcf39038d4acf7ac4288df11d8

          SHA1

          a58e7054c1fe4d6786a39382454076734ade2b92

          SHA256

          5d78361eb47424ca618847a2b3901f959108a1d78f350c2f16ae2695a2c2e4a9

          SHA512

          4275f6ced3b9949c952b597342e558250ebbe5ad8b03e609f5a3ac03a4db3312a23eb3679ac1aed0db196de89dd268f53d005cc70384f9c5bce4f4a26fdb6154