Overview

overview

7

Static

static

3

8c861dd155...70.exe

windows7-x64

7

8c861dd155...70.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    145s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/02/2024, 14:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    8c861dd1550c1b7b399e0b7662108970.exe
  • Size 6.4MB
  • Sample240203-rfrvysbca6
  • SHA256 944afef8b9de279637035ab6a6783e80ebf05fb3c08d6648e0ebbc69218f21ae
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8c861dd1550c1b7b399e0b7662108970.exe
    "C:\Users\Admin\AppData\Local\Temp\8c861dd1550c1b7b399e0b7662108970.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2580
    • C:\Users\Admin\AppData\Local\Temp\8c861dd1550c1b7b399e0b7662108970.exe
      "C:\Users\Admin\AppData\Local\Temp\8c861dd1550c1b7b399e0b7662108970.exe"
      2⤵
      • Loads dropped DLL
      PID:3004

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\VCRUNTIME140.dll
        • Size 91KB
        • SHA256 8ee6b49830436ff3bec9ba89213395427b5535813930489f118721fd3d2d942c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\_bz2.pyd
        • Size 85KB
        • SHA256 d6e5763cecd267be0ff5355ff53e93428f3dd7ab20458fb1e7432dffa060cf82
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\_ctypes.pyd
        • Size 123KB
        • SHA256 64f5072cd9536418ec0fd4b5c30c13b03cdddced1f9332d4d721c4b37ae3883e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\_hashlib.pyd
        • Size 46KB
        • SHA256 46d3016b73ecf3713228df563971feefcbebcea9925349a0807b48f0e09877ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\_lzma.pyd
        • Size 159KB
        • SHA256 d7acc95049c07298af56a316419e6548f3e6b56fb22dfb3382607a803dddb5e0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\_socket.pyd
        • Size 77KB
        • SHA256 85f200cb9adf0ef97d40b897868f6ad564211d3529f0b6dfe8e04c56a7b832bc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\_ssl.pyd
        • Size 151KB
        • SHA256 174ec95c793fc33a97c57709b5117ca17700b90e7c71d72c9ec4bc7757b747a9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\base_library.zip
        • Size 760KB
        • SHA256 02f81520a69cf2a1d901755f61c139f67b6e727ddcd91c46f89b74fb882d6cf6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\libcrypto-1_1.dll
        • Size 3.2MB
        • SHA256 00a1eeb37372d11559bf44c9e68af9c841c41c95a173f3dfec4e0b5923d0cae0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\libssl-1_1.dll
        • Size 673KB
        • SHA256 1b57a201184559164dedbddcb43bb110a18cafa19ea3d00fc23274ccfc420e94
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python38.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\python38.dll
        • Size 4.0MB
        • SHA256 560a6a5f8b7afa99600cc47da26a802c342d7f50ffe23850372f2fcf536cd26f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\select.pyd
        • Size 27KB
        • SHA256 bb81d220db83d5276fccda137d430160b8eafd40f4d92d86ebc718b4dfd555ac
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25802\unicodedata.pyd
        • Size 1.0MB
        • SHA256 e5ebcc99f94766951bb75731afe07b7c4481e7ff3d252f21d39ddea7c8da4147
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download