Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:27

General

  • Target

    bind_8152.exe

  • Size

    48KB

  • MD5

    3764b69cba97fc72e79b293db85805da

  • SHA1

    4a90aeb55276c571880251ef37b344a2ae68e702

  • SHA256

    28acf11675da22778790dc492bf9f75a6db36ca3c125b3cee47cbfb0677192a4

  • SHA512

    08f3ab8ef193c2b6efa304743d8a75b4b25babc2684e0dff9323e779f6353acdaba9a42af835132e37590511067d901b13306d5645155eec29b0f9051cb10f06

  • SSDEEP

    1536:fPgXwpm4RmzZwCnUF2ICqdkJI6cbHDhyb8G:fPgXLdqF2fqdkJIhnO8G

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bind_8152.exe
    "C:\Users\Admin\AppData\Local\Temp\bind_8152.exe"
    1⤵
    • Loads dropped DLL
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsj85D5.tmp\NSISdl.dll

    Filesize

    12KB

    MD5

    ed1a0e9f2e43d0b9911c20830bf9c70b

    SHA1

    6dc197bea1dcf81444148fb7cf963dc5f0fdda7d

    SHA256

    eb2aae4b1168d2cea71975ade37869988fab95346b8d4e8948dfa5b102f62f69

    SHA512

    6fb0210958b7579656e9f793adf4a03e2d5619ac6d76ecd2ce7ad8402bfe3273db68a04e551d8e3e76b6e9fd4fc09b5a3714db1e2da61c023ed998365427bed5

  • \Users\Admin\AppData\Local\Temp\nsj85D5.tmp\System.dll

    Filesize

    10KB

    MD5

    10c44246d99a1c2e5f5e6b52b111a63d

    SHA1

    0f41da79c3e789f4ae38738e3a5d73c538f8af4f

    SHA256

    7a24883bdbf08ce90938094b6ab6f09a842af10b18b8ae4d70da2e6b806490b8

    SHA512

    e5b0fa27cd02a67be5eb9c63646621d3e9ccfada98659c50dee8310a58ce12e1a6a059788b85f0f440067ed7e281a0e1a526b9403993b9000f91a51bfbb50da3