Overview

overview

7

Static

static

7

MSSQL To E...ck.exe

windows7-x64

7

MSSQL To E...ck.exe

windows10-2004-x64

7

MSSQL To E...sd.exe

windows7-x64

7

MSSQL To E...sd.exe

windows10-2004-x64

7

MSSQL To E...��.url

windows7-x64

1

MSSQL To E...��.url

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14-02-2024 15:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MSSQL To Excel v1.3/mss2xlsd.exe

  • Size

    914KB

  • MD5

    c7a8f9a0fcfdfbfef2028beeb32baf4e

  • SHA1

    f18e96a4b85e8c8ff6a5ab34f35d9e1b420ad3be

  • SHA256

    0cc93cadc7577dfa08b8c78bea6974914c93efd80e40dbe1ef8f10fc1d092440

  • SHA512

    c467c8982e4633b0e2fffbe417c3581434d7f8a4e8b6a658a1f14edd58c6e9c02c73d4fb99883b30839d6e31cbb4fea6a7f27409ee116bf05c5b5e366d7e7a87

  • SSDEEP

    24576:1kxaXSo0cXmDa6A/yecBN4n1XM5FPZ1a/KvTRNGyG:1kgio0wKtAKeK41c5l7vTDGyG

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MSSQL To Excel v1.3\mss2xlsd.exe
    "C:\Users\Admin\AppData\Local\Temp\MSSQL To Excel v1.3\mss2xlsd.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\GLCED0.tmp
    Filesize

    161KB

    MD5

    8c97d8bb1470c6498e47b12c5a03ce39

    SHA1

    15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7

    SHA256

    a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a

    SHA512

    7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f

    Download Submit

  • \Users\Admin\AppData\Local\Temp\GLF1A97.tmp
    Filesize

    10KB

    MD5

    3b2e23d259394c701050486e642d14fa

    SHA1

    4e9661c4ba84400146b80b905f46a0f7ef4d62eb

    SHA256

    166d7156142f3ee09fa69eb617dd22e4fd248aa80a1ac08767db6ad99a2705c1

    SHA512

    2b792296dffa4e43bc85295dc7691bd29762ce5d9d5eafaa74e199e6a8e5b24aa85d0a1b27776d4719a49b0d29abcf6f240746a209528e608b596b560e5a3b88

    Download Submit

  • \Users\Admin\AppData\Local\Temp\GLK10E4.tmp
    Filesize

    30KB

    MD5

    3df61e5730883b2d338addd7acbe4bc4

    SHA1

    03166e6230231e7e3583cf9c8944f4967aa1bf1b

    SHA256

    2efe9a54c8eb878711d9b6cd18f276838645aff52fe69d8a864376cb258ec616

    SHA512

    36e9d705d22dad3d952b4da578a990f2b63ec2f9fbf2734efdaea9ecbd4f07a8d7232792eb5bdd81c553354d51334993cb6103c377f3483a680eac9e41cd2087

    Download Submit