Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24/05/2024, 01:43
Static task
static1
Behavioral task
behavioral1
Sample
ca6e33cf72e210e9b8faaa354de8b2382fc5e2a163d9172802011f68983fccb0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ca6e33cf72e210e9b8faaa354de8b2382fc5e2a163d9172802011f68983fccb0.exe
Resource
win10v2004-20240426-en
General
-
Target
ca6e33cf72e210e9b8faaa354de8b2382fc5e2a163d9172802011f68983fccb0.exe
-
Size
49.1MB
-
MD5
4e14611a07ab337ac271117a19c3181e
-
SHA1
b1e420c460b8dd3d8fbcd5e1f0a14da833d6c05e
-
SHA256
ca6e33cf72e210e9b8faaa354de8b2382fc5e2a163d9172802011f68983fccb0
-
SHA512
6dfeafc0e260bd1d081ac6a3422f2c0d35d88c173391acab097eb672fddb5ee1b8366aee713c6dacea50b6f7714a4158142a729b981fffb1fe1efa2f26890110
-
SSDEEP
393216:LwZs2PWABsKi/W8Bs/md6sJZRbfnA3yt1lpoixFHOhioP3FFY0cOFqklODLpnZIl:MZGdO8BsOMsVICNpu1HKNLy70goW41
Malware Config
Signatures
-
Detects executables manipulated with Fody 1 IoCs
resource yara_rule behavioral1/memory/1936-1-0x0000000000A10000-0x0000000003B36000-memory.dmp INDICATOR_EXE_Packed_Fody -
Loads dropped DLL 1 IoCs
pid Process 1936 ca6e33cf72e210e9b8faaa354de8b2382fc5e2a163d9172802011f68983fccb0.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
\Users\Admin\AppData\Local\Temp\Costura\0356CB2390ED0D212B1CEB25ED194726\64\magick.native-q8-x64.dll
Filesize22.1MB
MD56cac0019d5f953791e171e57ea8f4e7c
SHA13ee0ae90971a319bee12b9bbe6d7587b7c8f923b
SHA25633d66978194cbf759e262a32b83f62e0e7185483824555998b3a9994d2e8b619
SHA5127a0c5805ddef633e522ebb64772c62fb74f7bf35275ab3635ff3b6d0ba55c1cb5f6cb269b5a1abfa5da748ea82bcc71225f0bc6ef8b074bb8cbb0c450e8f5324