Analysis

  • max time kernel
    92s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/04/2024, 14:51

General

  • Target

    ezsss42_cn.exe

  • Size

    1.5MB

  • MD5

    d3eb7c3bda08e25d92bf6ca8cab5587d

  • SHA1

    fc2304ad6f6e5c5e786bf315fb9b98c72e999017

  • SHA256

    6bf1ab81c446e2ce78a2971eab06e3237602fc66774ade736ef5182984d5da3f

  • SHA512

    343fa2a1f3fb72fa970bf1fd0fe2a851a460483649043bd776f7e6448dd75c1b4f972b7b1038c2b9a7904056085819a8595e2f24acaac49b7231bbf22746bda6

  • SSDEEP

    49152:dJnoL4XI6+I2Q6UTqF72FWBo7XdrduWNa7/:3PXBtk7AWWTdJnNaj

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ezsss42_cn.exe
    "C:\Users\Admin\AppData\Local\Temp\ezsss42_cn.exe"
    1⤵
    • Loads dropped DLL
    PID:832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsc4018.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

  • C:\Users\Admin\AppData\Local\Temp\nsc4018.tmp\ioSpecial.ini

    Filesize

    597B

    MD5

    06660ef2ba78ea6a502225728908c268

    SHA1

    ecb8ae1db0bc358bd5080d4e51580e224291bf6e

    SHA256

    d94cf32bdfea2ce3c7c8a664b6f7d8201bb1fc2d87fb18ae1bd419106fa59b48

    SHA512

    838ed2d4caa541ef65a2445269577ffd7b12f0c4f06bc958214e1dfe84c254a3bbee40d51fd836d6ad90af0a2bd23f2b21e2f4bb5ebf9f82d227d59b8bd77f65