Analysis
- max time kernel
94s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
14/03/2024, 13:12
General
- Target c8b366c3b38095da08cd637b4bdd927a.exe
- Size 58KB
- Sample240314-qfx7asfa56
- SHA256 391fc40494d7a3fe2ad2c35c280de423ed7064aba56ce0b19923ec91593d98e6
Score
8/10
Malware Config
Signatures
- Drops file in Drivers directory 1 IoCs
- Sets DLL path for service in the registry 2 TTPs 3 IoCs
- ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
- Loads dropped DLL 1 IoCs
- Drops file in System32 directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8b366c3b38095da08cd637b4bdd927a.exe"C:\Users\Admin\AppData\Local\Temp\c8b366c3b38095da08cd637b4bdd927a.exe"1⤵
- Drops file in Drivers directory
- Sets DLL path for service in the registry
- Loads dropped DLL
- Drops file in System32 directory
-
C:\Windows\system32\sVchost.exeC:\Windows\system32/sVchost.exe -k tylotj1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
tbbfkf.dll
memory/2732-0-0x0000000000400000-0x000000000040E22A-memory.dmp
memory/2732-7-0x0000000010000000-0x0000000010028000-memory.dmp
memory/2732-8-0x0000000010000000-0x0000000010028000-memory.dmp
memory/2732-9-0x0000000000400000-0x000000000040E22A-memory.dmp