Overview

overview

7

Static

static

3

0768341a57...9f.exe

windows7-x64

7

0768341a57...9f.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/03/2024, 01:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0768341a574ae5c39120379a29b46a9f.exe

  • Size

    5.8MB

  • MD5

    0768341a574ae5c39120379a29b46a9f

  • SHA1

    999e023b8578900f71659e700bcdf5b2ed1e28a2

  • SHA256

    7b85d0e4e3ee0bcb179b7d1d5f92a35adf8f8a7a9206daea94cc479cbfd94cb9

  • SHA512

    87f26ffdce2c23bec94f458d944313e0e992f941526962b330a0583c3497d27bf0699d9ecaef066d0b4fbca67234b196770abff91ff3a8bbcc8768eeea8588f8

  • SSDEEP

    98304:gbpO4+FVoQb4OpfoYo7l90B8z3ppbPQrCD0hHO+QL4TsDytXT+XkGzVb7lEwpzj9:gv+FLb4JYo7P0mz3ppbPCCghuz0TsmNe

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0768341a574ae5c39120379a29b46a9f.exe
    "C:\Users\Admin\AppData\Local\Temp\0768341a574ae5c39120379a29b46a9f.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:2352

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\gentee00\gentee.dll
          Filesize

          96KB

          MD5

          427d8406efd63d3ed906c565c73fd610

          SHA1

          58b4d079e9e672cdf3bd234a15ee23d0f6393b86

          SHA256

          916a58e9bd8327792e4fdb83d4439536ce88ddc3a6cdc69cae579af7088078dd

          SHA512

          9ba70be20367295c9187e8419d7e0e6444f821292d4e021611c1f13ff91e78f86fce285f50d793a34c34569fee225362e5232737797836d89e15aabd17f03cf3

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\gentee00\guig.dll
          Filesize

          20KB

          MD5

          fa3db33dcefded7b4fdcb948a5e6e53e

          SHA1

          0adfd644e4422ffcbcfd8bfc27fcec727f04836e

          SHA256

          424025e13c1a624d5900f7b264145907e1092ef68e9c51d76a2648d14fdb9a17

          SHA512

          9be40412d7a8939a41c764058b138f1aa6fa73e0f1d2aa8c251c4e58c0cedbcf9aeee1bf669fc4347e1bccc7a9310f25ebe4731530cc5d99c64e31ef6073623a

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\gentee00\unppmd.dll
          Filesize

          8KB

          MD5

          7b97f7a822f0f4f54c54b8ef92aaf09a

          SHA1

          d0916590b36d8e0507b6722449d7ffd2187498a6

          SHA256

          d6f3429b8ffe80e1bc023de22bc23d9b4d384d89a9b22db51aa27c804581642d

          SHA512

          d33c0c31df17738f0cd5384f579bacb512668ec8fec9c96e12125ffe58a38a46ac498f5924c8620a146b762fc318dd7f291efd27caaec45ca9f16d80dae05387

          Download Submit