Overview

overview

9

Static

static

7

hacked cli...et.exe

windows10-1703-x64

7

hacked cli...mi.exe

windows10-1703-x64

1

hacked cli...te.exe

windows10-1703-x64

1

hacked cli...v2.exe

windows10-1703-x64

7

hacked cli...sy.exe

windows10-1703-x64

6

hacked cli...ic.exe

windows10-1703-x64

1

hacked cli...ea.exe

windows10-1703-x64

1

hacked cli...id.exe

windows10-1703-x64

1

hacked cli...on.exe

windows10-1703-x64

9

hacked cli...ra.exe

windows10-1703-x64

9

hacked cli...ga.exe

windows10-1703-x64

1

hacked cli...in.exe

windows10-1703-x64

1

Analysis

  • max time kernel
    30s
  • max time network
    18s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    01-05-2024 00:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    hacked client (rats) LMAO/Hermotet.exe

  • Size

    1.9MB

  • MD5

    47c6e34bf60e82c3a96119c1cf527c44

  • SHA1

    09b8cbbe0ef5cf3c1a09a27ce753ab4b004a724e

  • SHA256

    f65307eb8257dec735953bfba5c714c25d7ee56c059f5745589da5eea0ebfc34

  • SHA512

    5141a26f72b217cae2af194659b8dfb8bad6912a7ae41cd3dfb542965f250f77e384de46829aa83c1611175febb9a2f106913d84c3df798bbb46a418b263cba6

  • SSDEEP

    49152:WfAYYQ5jY24dwTaglicPKZqaoCO8Op4lLTfA:4Ai5k24dJgHCSwLT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\Hermotet.exe
    "C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\Hermotet.exe"
    1⤵
    • Loads dropped DLL
    PID:3188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\16ec68cf-d28f-4048-90c5-4286b379e033\SiticoneDotNetRT.dll
    Filesize

    136KB

    MD5

    9af5eb006bb0bab7f226272d82c896c7

    SHA1

    c2a5bb42a5f08f4dc821be374b700652262308f0

    SHA256

    77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

    SHA512

    7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

    Download Submit
  • memory/3188-64-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-4-0x00000000079F0000-0x0000000007A82000-memory.dmp
    Filesize

    584KB

    Download
  • memory/3188-3-0x0000000007E50000-0x000000000834E000-memory.dmp
    Filesize

    5.0MB

    Download
  • memory/3188-0-0x00000000008C0000-0x0000000000ABC000-memory.dmp
    Filesize

    2.0MB

    Download
  • memory/3188-5-0x0000000005410000-0x0000000005420000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3188-6-0x0000000005230000-0x000000000523A000-memory.dmp
    Filesize

    40KB

    Download
  • memory/3188-7-0x0000000005250000-0x000000000525A000-memory.dmp
    Filesize

    40KB

    Download
  • memory/3188-8-0x0000000005440000-0x000000000544A000-memory.dmp
    Filesize

    40KB

    Download
  • memory/3188-9-0x0000000005450000-0x00000000055F8000-memory.dmp
    Filesize

    1.7MB

    Download
  • memory/3188-1-0x0000000073130000-0x000000007381E000-memory.dmp
    Filesize

    6.9MB

    Download
  • memory/3188-66-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-35-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-62-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-80-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-78-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-76-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-74-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-72-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-70-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-68-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-18-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-2-0x0000000007770000-0x0000000007952000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/3188-56-0x000000006FC90000-0x000000006FCC7000-memory.dmp
    Filesize

    220KB

    Download
  • memory/3188-60-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-58-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-55-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-51-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-49-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-47-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-45-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-43-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-41-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-37-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-33-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-32-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-29-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-27-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-25-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-23-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-21-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-19-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-53-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/3188-17-0x0000000071BA0000-0x0000000071C20000-memory.dmp
    Filesize

    512KB

    Download
  • memory/3188-39-0x0000000005450000-0x00000000055F4000-memory.dmp
    Filesize

    1.6MB

    Download