Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 15:25

General

  • Target

    Vina.Digital.Talking/Vina Digital Talking parrot.exe

  • Size

    1.9MB

  • MD5

    b994463986add73cb5fa0df93f1bba90

  • SHA1

    8da345315a0d5523f4e4d1e20927780678ab661c

  • SHA256

    118c3576e65c38e1a0dfff4598c930db82630eed343cec08bba6c720de94a958

  • SHA512

    e4bcfc145ab4c9ab1f6bbf9a99083fa0ff8fd96dab746f438046bf429af8c9700e6144501ab58287cf0fe67f3daf0993f450800bbd2a5ca659cea96dfc35f72d

  • SSDEEP

    49152:pkLZUKg6OQQ0sQIZp9PIACr7rCiBuZplMeh937HXWw:eLQ6OQlIZp9glHrlkhMehpmw

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Vina.Digital.Talking\Vina Digital Talking parrot.exe
    "C:\Users\Admin\AppData\Local\Temp\Vina.Digital.Talking\Vina Digital Talking parrot.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:1620

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\GLCF0E.tmp

          Filesize

          161KB

          MD5

          8c97d8bb1470c6498e47b12c5a03ce39

          SHA1

          15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7

          SHA256

          a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a

          SHA512

          7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f

        • \Users\Admin\AppData\Local\Temp\GLF1AD6.tmp

          Filesize

          10KB

          MD5

          3b2e23d259394c701050486e642d14fa

          SHA1

          4e9661c4ba84400146b80b905f46a0f7ef4d62eb

          SHA256

          166d7156142f3ee09fa69eb617dd22e4fd248aa80a1ac08767db6ad99a2705c1

          SHA512

          2b792296dffa4e43bc85295dc7691bd29762ce5d9d5eafaa74e199e6a8e5b24aa85d0a1b27776d4719a49b0d29abcf6f240746a209528e608b596b560e5a3b88

        • \Users\Admin\AppData\Local\Temp\GLK1122.tmp

          Filesize

          30KB

          MD5

          3df61e5730883b2d338addd7acbe4bc4

          SHA1

          03166e6230231e7e3583cf9c8944f4967aa1bf1b

          SHA256

          2efe9a54c8eb878711d9b6cd18f276838645aff52fe69d8a864376cb258ec616

          SHA512

          36e9d705d22dad3d952b4da578a990f2b63ec2f9fbf2734efdaea9ecbd4f07a8d7232792eb5bdd81c553354d51334993cb6103c377f3483a680eac9e41cd2087