Overview

overview

10

Static

static

10

6febf9009d...34.exe

windows7-x64

7

6febf9009d...34.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/01/2024, 17:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    6febf9009df8b33329a8e746ac27f334.exe
  • Size 5.7MB
  • Sample240122-wctmlacah8
  • SHA256 ad16e884ae04e09b369bd2febbf1e928a556286909192702c82fd8b573bd461b
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6febf9009df8b33329a8e746ac27f334.exe
    "C:\Users\Admin\AppData\Local\Temp\6febf9009df8b33329a8e746ac27f334.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3224
    • C:\Users\Admin\AppData\Local\Temp\6febf9009df8b33329a8e746ac27f334.exe
      "C:\Users\Admin\AppData\Local\Temp\6febf9009df8b33329a8e746ac27f334.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:848
      • C:\windows\SysWOW64\schtasks.exe
        C:\windows\system32\schtasks.exe
        3⤵
          PID:2976

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\VCRUNTIME140.dll
          • Size 81KB
          • SHA256 6823b98c3e922490a2f97f54862d32193900077e49f0360522b19e06e6da24b4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_bz2.pyd
          • Size 69KB
          • SHA256 3163faab1d971649e78497200382286cac7b4c9302dd49c2fab8be287466f89b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_ctypes.pyd
          • Size 93KB
          • SHA256 5dfe799784ab7fb0727bfed0edf16cc582dbf38eefac16b487874693c707c762
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_hashlib.pyd
          • Size 559KB
          • SHA256 f87688f17820a0ba7c3a785dac32a110cf81c5a341eb7036f57af4a3b19e70a2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_hashlib.pyd
          • Size 471KB
          • SHA256 ba6331b07b136b921bd624036f9a69bc7053ac76d7b8953f2bb73d37e9f4f628
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_lzma.pyd
          • Size 172KB
          • SHA256 6e1beffb1735804a476b247c364c636a6d8205c59fe6817f91d4765f40684d35
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_socket.pyd
          • Size 53KB
          • SHA256 25605e93c25765780296a13b131eeeccc058e85e75396782a431923b8e5986ee
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_ssl.pyd
          • Size 261KB
          • SHA256 0ce7a5de2667fc2678b1ea72551d1b45d27d1dbf16de34b951b7a48e6b4956bf
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\_ssl.pyd
          • Size 294KB
          • SHA256 aeb2a7b773e3d76d16cb2518580b6056a2f86a21571849dee55e67c32a73ce04
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\base_library.zip
          • Size 430KB
          • SHA256 6f05d6d6b273bb01cda064cce941f1b76b276915f0e6411db2f08ca4a3d8d9ad
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          psutil._psutil_windows.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\psutil._psutil_windows.pyd
          • Size 54KB
          • SHA256 b2af31f74b0963f45ea5dd5df2948a0713c837776c57c57da4f772da132ed818
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          python36.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\python36.dll
          • Size 1.1MB
          • SHA256 606171464bf27f67bea8d08e8015fd6777ab8b574c22691a29254098b3f94e25
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          python36.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\python36.dll
          • Size 833KB
          • SHA256 ee7c2c685280b3981def8da10a3247335649c22bcfd464f991ac4c11d02e31f0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\select.pyd
          • Size 16KB
          • SHA256 11bad8fccaf9cd3c8a1de238a6dad3a4289be1d2e1d97bacf213cd0f3c2b1e75
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          test_rules.exe.manifest
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\test_rules.exe.manifest
          • Size 1KB
          • SHA256 d77e1a1da4150ec7670f5d77d718ba4af2bcf6e6cf5c57eebc767c60bb34e135
          • MD5 SHA1 SHA512
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\unicodedata.pyd
          • Size 419KB
          • SHA256 c3a4b9c9cae4abeaefe5489cc81ff3f33177558dd2119a1bdbdcec4ed8443788
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI32242\unicodedata.pyd
          • Size 459KB
          • SHA256 405f65e1fe6f3c2df4f4f3fe62598002153645368037a2b8d01a2dff466126c1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download