Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 02:53

General

  • Target

    738bfbf9b7424dec9f0e0c70a819bd4e.exe

  • Size

    45KB

  • MD5

    738bfbf9b7424dec9f0e0c70a819bd4e

  • SHA1

    f1508f8941d70960ea53aebace46344818c0d3f3

  • SHA256

    c6f9aa11af14e44d068219470517ca1f65e2532a524d63f8a52fe5ae60d67f22

  • SHA512

    5a264941045dcc5756356860da9f15e0012912784606a3a541927bbf1af2b4b6bb603f367db1236e30737279416867cb5d3221ca650ced09fd80d0c53f51d405

  • SSDEEP

    768:q9TTaOWBzbsVpZsXJ3fvq1JCw4gOLxLXLNZbisGXnd8lqYW2ycFblFqy:dOWBzbGwJ3HkCw4gOV3N8sUeUUpF3qy

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\738bfbf9b7424dec9f0e0c70a819bd4e.exe
    "C:\Users\Admin\AppData\Local\Temp\738bfbf9b7424dec9f0e0c70a819bd4e.exe"
    1⤵
    • Drops file in System32 directory
    PID:2568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\alg.scr

    Filesize

    1KB

    MD5

    8cadf00b6816b94e4a6c9836cdc7b660

    SHA1

    603963e7da62bea2a11fc3a06004d162e9d94e0b

    SHA256

    c8ce155637c152039b3a5cccc2a8a12ade8bcba733e9823dc1f741f0a2240456

    SHA512

    9ea8e1eab8a8bc41708491c7774f7a424b67c5779c7095692b55391a1f22f438dfe892e6a6e2d65f307a7fdd41118de809e9e5d7914c5ff1d123fd78c5a5d70f

  • C:\Windows\SysWOW64\hosts.scr

    Filesize

    1KB

    MD5

    45992a7bf8a2c283cc863443a5d01bcc

    SHA1

    8ffc689ae200fa73b2c6ac05333d2a65ecd15ce1

    SHA256

    efba06eea4570a21b1c566df5b1d3f80913c9ec4d92a7e021366db3ed8db35d5

    SHA512

    86c0061f27966db9caee1dec1a6ec48af061fe716bd20ee0fb1bae8b07bbfd108131fe9668553284d7fb38b6ad5dcad2bff5bd225f93de03e5115c0460264272

  • memory/2568-1-0x0000000000220000-0x0000000000222000-memory.dmp

    Filesize

    8KB

  • memory/2568-0-0x0000000000400000-0x000000000041D000-memory.dmp

    Filesize

    116KB

  • memory/2568-14-0x0000000000400000-0x000000000041D000-memory.dmp

    Filesize

    116KB