Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 20:09

General

  • Target

    file.exe

  • Size

    539KB

  • MD5

    9d4d3e9107fab87e6b86d8ad6cfc8244

  • SHA1

    841e2183ebee75b32319ce7cf81f82f8d2ca3cea

  • SHA256

    a6516b7a67fd64731c893ad8ee12c2878673841cbb756a8e597812da52b08027

  • SHA512

    e9da618fa873db7a2b5ab4813db6ef6bd0c2356c4682c9415b9b62dc192e1fc8e5fee423c698cc3695e665e2699664c68c8041746ad0e51753309a9bc21eecf3

  • SSDEEP

    12288:v5d20CeBNGZiM1KVO0VeUOmC5sf52gpc/6ZpKS9fJsM9gQ07DG2iHh9v7zZwZE+t:xd20rwZiM1d0V78m4WL

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Loads dropped DLL
    PID:3008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Roaming\d3d9.dll

          Filesize

          923KB

          MD5

          e496eb04f812481319e7ebc5f64c253b

          SHA1

          029b852d41223c4c246f51026acbf7b6b7856d28

          SHA256

          1233aaf0fd000edcfaf0e4f96f1878fea2d8defab0d6c26cfae7167c21c4ba93

          SHA512

          edb5becec9a2292e9c982eb7b1dfc0f0e473a1800425245738d689bec2b3ac3c4f21e8074a4308c38a21dbd77216242708302ed98feb128e8cbde818a6c0dd85

        • memory/3008-0-0x00000000744EE000-0x00000000744EF000-memory.dmp

          Filesize

          4KB

        • memory/3008-1-0x0000000001040000-0x00000000010CE000-memory.dmp

          Filesize

          568KB

        • memory/3008-2-0x0000000000350000-0x0000000000356000-memory.dmp

          Filesize

          24KB

        • memory/3008-7-0x00000000744E0000-0x0000000074BCE000-memory.dmp

          Filesize

          6.9MB

        • memory/3008-8-0x00000000744E0000-0x0000000074BCE000-memory.dmp

          Filesize

          6.9MB