Analysis
-
max time kernel
142s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
23-05-2024 01:26
General
-
Target
ZoomSetup.exe
-
Size
44.9MB
-
MD5
fdc3b66311cd19524c14db567bc9b140
-
SHA1
9299b013e7a72d1638e0381ba1ef1a89f8e1bab9
-
SHA256
e257cf8c1fc5332bf81f85408123762457a698709f745da15607dc594742019f
-
SHA512
f866ed7e7a27d9c6da484ec8dff8b0b0545cab261cb86d77186ee1287e367f89517bd2a195905599ab2288b67eb2e6db0ff6a0d6cfe133f1b0a8ad417caf2d52
-
SSDEEP
786432:BrVP72qAVPQhBbH4vgIud86Ja3eqIus6fcrNddM51SmLYuG3Ova8Vi7:ZLOPQhBb2VuCjuqILdu5RYVMa6i7
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ZoomSetup.exe"C:\Users\Admin\AppData\Local\Temp\ZoomSetup.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-O69QQ.tmp\ZoomSetup.tmp"C:\Users\Admin\AppData\Local\Temp\is-O69QQ.tmp\ZoomSetup.tmp" /SL5="$501D6,46576118,140800,C:\Users\Admin\AppData\Local\Temp\ZoomSetup.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD5c0a9bf6505dde3b00b516443f54742cb
SHA1212110fe7230ac702d56fa38e3b2b907131893b8
SHA256decf9c7aaee458a9671efe6fb1a6defb2f6a121d06112a24a433a412af94af68
SHA5125fbc72c1ebff450ba8f91811628dfd579ab946752cdd8c54eaa968be0ad02d4591b53a22a4a9436ab91dc0d9b0b0d039bf80700be48ea92554a5dfe21b9aa21a
-
Filesize
232KB
MD555c310c0319260d798757557ab3bf636
SHA10892eb7ed31d8bb20a56c6835990749011a2d8de
SHA25654e7e0ad32a22b775131a6288f083ed3286a9a436941377fc20f85dd9ad983ed
SHA512e0082109737097658677d7963cbf28d412dca3fa8f5812c2567e53849336ce45ebae2c0430df74bfe16c0f3eebb46961bc1a10f32ca7947692a900162128ae57
-
Filesize
180KB
-
Filesize
88KB
-
Filesize
180KB
-
Filesize
1.5MB
-
Filesize
1.5MB