Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 21:14

General

  • Target

    b834bb9bb6fb21090ab1cf2e0f4fefb6.exe

  • Size

    29.0MB

  • MD5

    b834bb9bb6fb21090ab1cf2e0f4fefb6

  • SHA1

    9aa53305fca6db5493b724e5854d89d8ee346dbf

  • SHA256

    884df1caa180ebc43ad5c67f64272040ad914165bf8212b0bb5b95448b5be61d

  • SHA512

    21c1bc90547c9656ceef40e4ef428b01f4a99e07a6d56cf0b63e2a0b6a2d030e27c675f30af2bfa713cbcbd0d74f2b18211fd174de0d98f5cc85c1ef97b42ee2

  • SSDEEP

    196608:jUdkKzMzo1XU8d+8wSZ/gd2cBnvjeApaAvktrlrB3ytPqVxUQVmBDTSWhi:OMzo1XnI2cNvjtIAvkt0PqbsBDTs

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 4 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b834bb9bb6fb21090ab1cf2e0f4fefb6.exe
    "C:\Users\Admin\AppData\Local\Temp\b834bb9bb6fb21090ab1cf2e0f4fefb6.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

    Filesize

    22.2MB

    MD5

    58f0169ab04f39abdbacaf2b9c91f332

    SHA1

    e3699496cdd19a00016d315cb02d7bbad4349ce1

    SHA256

    e1aa4f4faf927d06fac70755a6ceeca5225eea6ebca4041fe75f7c7c8ca65a56

    SHA512

    8359510fbdcaecfca04b5cb734520256e138e734b7220f089768bf5acab63ca981c9070aa1e2ddc697d8cc0294998eb32955124b47fd6a0c0e4593c5b4f93d10

  • C:\Program Files\7-Zip\7z.dll

    Filesize

    5B

    MD5

    b5b682b742431a52ea8b17c72ad9c572

    SHA1

    326320f469235708c59f678c9a7357dca552d306

    SHA256

    30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

    SHA512

    4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

  • memory/2924-0-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2924-217-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB