Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2024 21:41

General

  • Target

    chatsetup.exe

  • Size

    5.6MB

  • MD5

    fc6eeb99ca8828a57f90914a00de9e76

  • SHA1

    6029053fc46fa5d860a62a66cf2899ad885c9bdc

  • SHA256

    3a5d6142bedcde67c84e4026106c984f3321f23767e08bbbb7e456dff0427761

  • SHA512

    c6b3940507059d5fe63335d2c008bc653faf65d11518afbe52c63797cd3e092ee90d3fd78e61e31ca83a649bba90db610e4693051f2924e91ffa76bcd985dc1c

  • SSDEEP

    98304:EF0i9KXEv7h2uz0GnjCFk8j5jg8UQxz20AO3pOZA67+NwxUNYHdaCOIEq35YhMv+:pi9Pv7NtjCh9jJNx6FakF7+NkaIEg6h3

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\chatsetup.exe
    "C:\Users\Admin\AppData\Local\Temp\chatsetup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nst4490.tmp\ioSpecial.ini

    Filesize

    585B

    MD5

    77f1ccba55f3f3b62d531de022611328

    SHA1

    199f4e5496873df3707b72374f714c4b21adbc18

    SHA256

    2e042c82b35de8bf0f7663cf2054f6f2d5fa3ea365d41a7c6e8c12ec4bae0759

    SHA512

    173c56cd0106b13d5719efdf323aeec7d888240818c1523b5a0b1cf569a2e347099341d7e348e537e549981479d8d7635e3b9146d08d72fe525d38b82ba42c77

  • \Users\Admin\AppData\Local\Temp\nst4490.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    1e8f2fefe3ce893b117b26948b8978cb

    SHA1

    59cfc6c3f5716e91609e54ca80ae8b06c93ef8ab

    SHA256

    8203ae1589a50e6ff012e5d27bdd4f8ed7506077ca9b052827f5e90aaeb98519

    SHA512

    b3c36e1aa5d3ee5f482f4175a7d6fe10cf2bf3bd3423ab4266d11c4181cfbc7e3f66a30855034a8ec026a4d5987598f0116e98519b7445d9e5687bcbab2c0e5c