Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09-04-2024 22:07
Static task
static1
Behavioral task
behavioral1
Sample
350333b97523f25fa6d04b2016ed38a1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
350333b97523f25fa6d04b2016ed38a1.exe
Resource
win10v2004-20240226-en
General
-
Target
350333b97523f25fa6d04b2016ed38a1.exe
-
Size
292KB
-
MD5
350333b97523f25fa6d04b2016ed38a1
-
SHA1
2e45538ace9c6fd968ff05a79489e6ba9be337c2
-
SHA256
2a3f37c68b8b56ab044489025035308e3abf061762d1c0630fa5ea865ecf31f8
-
SHA512
8658e7138ab5aeae78439dd9c1e48b5535edba07733b3c674f61db903e7d7955d39c0d431872cd2a98f846b0e4e096d77dffb143b626c2c073d2ea92e1e06a1a
-
SSDEEP
6144:LFpiTSfDhpOQAYg718kVFRCHplF6UKSbGqJSn:eTSfDh7AL18UwJbhKSw
Malware Config
Signatures
-
Modifies AppInit DLL entries 2 TTPs
-
Executes dropped EXE 1 IoCs
pid Process 3760 zonasdl.exe -
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\zonasdl.exe 350333b97523f25fa6d04b2016ed38a1.exe File created C:\PROGRA~3\Mozilla\eggeazi.dll zonasdl.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\350333b97523f25fa6d04b2016ed38a1.exe"C:\Users\Admin\AppData\Local\Temp\350333b97523f25fa6d04b2016ed38a1.exe"1⤵
- Drops file in Program Files directory
PID:4864
-
C:\PROGRA~3\Mozilla\zonasdl.exeC:\PROGRA~3\Mozilla\zonasdl.exe -ufdnlxl1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:3760
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
292KB
MD5898d63653d18093b34c94c10d3d88bb2
SHA14fd36c7bac167a75ba989967f15364bee5648976
SHA2563afb4c46eae8a55a241e858b04f6752c6a5a4e3db70c87edcaec835b89b0b60f
SHA512e692e101ee1bc0bd834ba75141c007fef935e1d2eda301f4faaddcbcce74ac4e417a5d76a421b58566fe8bb7c026f4b04fd0e607c0ca754f633d3531a9358f16