Overview

overview

10

Static

static

3

AIMr.exe

windows7-x64

7

AIMr.exe

windows10-2004-x64

10

AIMr for exe.pyc

windows7-x64

3

AIMr for exe.pyc

windows10-2004-x64

3

Resubmissions

20/02/2024, 00:51

240220-a7p21agc7s10

20/02/2024, 00:39

240220-azyzyagg3310

Analysis

  • max time kernel
    363s
  • max time network
    372s
  • platform
    windows7_x64
  • resource
    win7-20231215-de
  • resource tags

    arch:x64arch:x86image:win7-20231215-delocale:de-deos:windows7-x64systemwindows
  • submitted
    20/02/2024, 00:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AIMr.exe
  • Size 8.7MB
  • Sample240220-azyzyagg33
  • SHA256 754cdfe578fd727a22d985d006913e4f6f89c209fa7d85401449b0f4ecc6179e
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AIMr.exe
    "C:\Users\Admin\AppData\Local\Temp\AIMr.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2760
    • C:\Users\Admin\AppData\Local\Temp\AIMr.exe
      "C:\Users\Admin\AppData\Local\Temp\AIMr.exe"
      2⤵
      • Loads dropped DLL
      PID:2964

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI27602\api-ms-win-core-file-l1-2-0.dll
        • Size 13KB
        • SHA256 55565231aaefb87e36e20e8bc9e5f57a6ce60a91ffe2cc29711fb2df70f17560
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI27602\api-ms-win-core-file-l2-1-0.dll
        • Size 13KB
        • SHA256 69d2e82663ec1be7cec2d20b82b353a7a4ac2b71474aa549b5308464273285ca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI27602\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 89faf112c004bf34f240b3b4fae6941316d3e9844d14cddbdfce4964ff410239
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI27602\api-ms-win-core-timezone-l1-1-0.dll
        • Size 13KB
        • SHA256 6c1c6936309f16a42801b3e69567269e3faf9f97455d7d1ca1aeac22d963b135
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI27602\python312.dll
        • Size 1.4MB
        • SHA256 3412edf720dca12dea45eb011f520954dfefe9fc6699d0c188300c38a5b6af95
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI27602\ucrtbase.dll
        • Size 860KB
        • SHA256 827723fdaf06523d858dc7f7cc74bc31b2515682f3d67a83fdc56d2b9131f20a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path \Users\Admin\AppData\Local\Temp\_MEI27602\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 13KB
        • SHA256 2756035ca5105caf7ab63ea7284c68403adc912bd08906bf5c18c7ff3b47ab5b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path \Users\Admin\AppData\Local\Temp\_MEI27602\python312.dll
        • Size 6.7MB
        • SHA256 0cc4e557972488eb99ea4aeb3d29f3ade974ef3bcd47c211911489a189a0b6f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path \Users\Admin\AppData\Local\Temp\_MEI27602\ucrtbase.dll
        • Size 987KB
        • SHA256 a8f9a12b1b6374f84380090eb396630a3409c7ec3bdeee3930ac6ca6cebe423e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download