Analysis
- max time kernel
94s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
04/04/2024, 23:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
accb70087fb908f06cbeb0191187ec7edbc5d2050109a8ea7bbdd46b3a295656.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
accb70087fb908f06cbeb0191187ec7edbc5d2050109a8ea7bbdd46b3a295656.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
- Target accb70087fb908f06cbeb0191187ec7edbc5d2050109a8ea7bbdd46b3a295656.exe
- Size 319KB
- Sample240404-3ylbnseh43
- SHA256 accb70087fb908f06cbeb0191187ec7edbc5d2050109a8ea7bbdd46b3a295656
- MD5 1a8250a370bc3de9c59a6e1025890d69
- SHA1 b4adc886f6323cf7334abc57acac36afff9e20de
- SHA512 4c5dc0f67af606da8ebe0b46d739a0d8c0e3d5d1ecec386557a25813f2a3ba8205415ff3daad13084b5728e6df9cbad3027750982d41d6c5618c3203ca8e369b
- SSDEEP 6144:CDJVazMKV31FdaQvXluxqU+A/0y+nt75voqQEnHv0CxN8H9RJPz7DhN:CDJM/bXntAh+nhZoqQEHvVIzJPzj
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Modifies AppInit DLL entries 2 TTPs
- Executes dropped EXE 1 IoCs
pid Process 4748 hdxpvzc.exe - Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\hdxpvzc.exe accb70087fb908f06cbeb0191187ec7edbc5d2050109a8ea7bbdd46b3a295656.exe File created C:\PROGRA~3\Mozilla\ydmvyrg.dll hdxpvzc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\accb70087fb908f06cbeb0191187ec7edbc5d2050109a8ea7bbdd46b3a295656.exe"C:\Users\Admin\AppData\Local\Temp\accb70087fb908f06cbeb0191187ec7edbc5d2050109a8ea7bbdd46b3a295656.exe"1⤵
- Drops file in Program Files directory
PID:4252
-
C:\PROGRA~3\Mozilla\hdxpvzc.exeC:\PROGRA~3\Mozilla\hdxpvzc.exe -ilrweca1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:4748
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\PROGRA~3\Mozilla\hdxpvzc.exe
- Size 319KB
- SHA256 f6d9dd778e7aea2c0f8a75346ac66c499abfd60dd2142d1862b61f14d7dc8564
- MD5 19c6826a565a5eb3a7caa427b7d259d2
- SHA1 867342d4cde02e410c40653955bbee1a8174351a
- SHA512 e9b25f16121f2573b8fe04b9afbd50ea5d07bc7103fe6a112a69856211672587ef7751ddd33cce46bddce81de5858f758bb8d7c985265d7030c788708823afa3
- SSDEEP 6144:CDJVazMKV31FdaQvXluxqU+A/0y+nt75voqQEnHv0CxN8H9RJPz7Dhk:CDJM/bXntAh+nhZoqQEHvVIzJPz6
- MD5 SHA1 SHA512 SSDEEP