07e9a7dfc363ad0c76e33431272b8fe3d219a255edb3380741d63cb2b3a29cbd | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 01:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bd48349aabce2861bb9603beac9205fa.exe
Size

61KB
MD5

bd48349aabce2861bb9603beac9205fa
SHA1

de5aa5dcd08ed24e66d8fe50ceaf7915fdd8c8d4
SHA256

07e9a7dfc363ad0c76e33431272b8fe3d219a255edb3380741d63cb2b3a29cbd
SHA512

3ab8f350f9a613ee7582fdfb2dd6d401be0136e7e3659eaa3e93f8e558873fb19aee0438bebfa0dad2145fb8e054c5107f6a07065b87a09e86b9dd108e74aa8e
SSDEEP

1536:Utr9krgjc2vCCVYi8KZKmvXShJVA28MBG6CoIIGV:+CrcPibhJhbY6rYV

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2264	bd48349aabce2861bb9603beac9205fa.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\48104.kol	bd48349aabce2861bb9603beac9205fa.exe
File created	C:\Windows\SysWOW64\ayeetj.huo	bd48349aabce2861bb9603beac9205fa.exe

C:\Users\Admin\AppData\Local\Temp\bd48349aabce2861bb9603beac9205fa.exe
"C:\Users\Admin\AppData\Local\Temp\bd48349aabce2861bb9603beac9205fa.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

\Windows\SysWOW64\ayeetj.huo

Filesize
94KB

MD5
2c27b9196b6d1691db065531e7376a66

SHA1
ef0f30c5d8d846b8fa302f725473f9dc166380b8

SHA256
e7f4ba58915e356510aedd6bce941b3d6bc57bbec18c20d48a5c58214a965abc

SHA512
91d92feeba21a56403df9855784ffacbb3f1840e683beae11d6e7d96d7cb8c5e1f4a2a3cd133ced3ab4eb945a4b5fe4521c1d0ee0b47454dd262ee2b13cc61ab

Download Submit