Analysis

  • max time kernel
    92s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/02/2024, 04:26

General

  • Target

    987998abec32b3ccba444e3ce93ca2fa.exe

  • Size

    282KB

  • MD5

    987998abec32b3ccba444e3ce93ca2fa

  • SHA1

    0a7a700b2cb8132ed72f5db5c79542bb091ce57a

  • SHA256

    bbabdbb8b78b4539dc1e484dc68752c41b89998d7b7a13e6a8fc8755e128c63b

  • SHA512

    b0ab2415c78d020c15296964b65f10a0c4bb2302131e4bf85a7818b5f1b32358a3da1682e832a667a134413baee95aa5a15fc87e3519732137d3d3280a5f463b

  • SSDEEP

    6144:cEKTUVXxexXry6MGdXOA6CFeC5MHf9+IiAWfqU5OmBROK2X1JF9U73bc7dL6Iy7g:cEiWX4BG6jewfMf9EAWiUpiMuLbK4R

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\987998abec32b3ccba444e3ce93ca2fa.exe
    "C:\Users\Admin\AppData\Local\Temp\987998abec32b3ccba444e3ce93ca2fa.exe"
    1⤵
    • Loads dropped DLL
    PID:4244

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu-1094.dll

          Filesize

          249KB

          MD5

          adb647de203421001356defee6fa3dab

          SHA1

          393278ddf756d236be35779666066c544acc7458

          SHA256

          c96807e91b41cbf4db5d3a97cc68662df344912f310b738b045501ac2c9eb5fd

          SHA512

          62024663db7af728ada8f73772c30d9ac9ec3486f0b1cd04c918d3ef3aa09d696c3dc063611b7fb6b661b0acc875f1cbd0ec73f9caab4cbdae83f652f294e821

        • C:\Users\Admin\AppData\Local\Temp\{DF2C49FE-D740-3A26-D8CD-9F6204CF6B08}\_Setup.dll

          Filesize

          169KB

          MD5

          595458696f906577db8f3ff737609aae

          SHA1

          aa3a6e42ce0219a27f956ba3cf6197051da5d84f

          SHA256

          cf46cc397954a6be26a3dc94d2370c00f175231c897be060d53c465cc06bab81

          SHA512

          f23721550d02acda9b2429309e52b5a2675eb760b9c36ab4473636bf6f8d9c1835fedc44d45cf8adb7848879c4fabe45d09937903cbd9718caa287c1ed4eb648

        • C:\Users\Admin\AppData\Local\Temp\{DF2C49FE-D740-3A26-D8CD-9F6204CF6B08}\_Setupx.dll

          Filesize

          22KB

          MD5

          d60016e0c131f41b19004fdedd805d86

          SHA1

          3504f9fb4e7fa0a4705d658c879f6862f60946e5

          SHA256

          b5135a0209978e9b88f77ae4e3567d8ab8f241bb6f3723c68f998d247cb01952

          SHA512

          398444d4befe6816e7029d6df8637ba5ad2a3060012386c9d199249507cd160abc11f46b7257bd1f1c87178802dc66552d3b02d5bb3e4730f0c429451a111573