Analysis

  • max time kernel
    142s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 20:45

General

  • Target

    c9943f32e3b532d3f796fa65c80825bb.exe

  • Size

    6.3MB

  • MD5

    c9943f32e3b532d3f796fa65c80825bb

  • SHA1

    37eab049c541c9b20b58a6d32c137d13bf25562b

  • SHA256

    b2fc17ab6142637d4ce13800cc73612c7f3f8b7069c886cb92f29a378c055504

  • SHA512

    685462632fd2a438c9d89a48af6767cbadd04d32634938c2c9e990e725ad6d5662d68c40014918918cbb13e90588582ab874792953c9d280903596d6d099d97c

  • SSDEEP

    98304:3ubtKJRu+IF/7M8eYcsOiiEO05KkN95iPMJmvPkFN2DZokfgd8o6li8:3ubwJRu+eeYTiEO05K89yMJO

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c9943f32e3b532d3f796fa65c80825bb.exe
    "C:\Users\Admin\AppData\Local\Temp\c9943f32e3b532d3f796fa65c80825bb.exe"
    1⤵
    • Drops file in System32 directory
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2372-0-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-1-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-2-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-3-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-4-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-5-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-6-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-7-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-8-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2372-9-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-12-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-13-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-14-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-15-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2372-16-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-17-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-18-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-19-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-20-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-21-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-22-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-23-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-24-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-25-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-26-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/2372-27-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB