Analysis

  • max time kernel
    140s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 06:49

General

  • Target

    58b7e2b4af0eef2241d4050b9fcd23f1590b81b005f022f0d7e33c6d1cc61f62.exe

  • Size

    5.2MB

  • MD5

    7075f530fba88e477acb8c46ed477f47

  • SHA1

    ae0aa7944c79be2c8804dc9f565b57829d679652

  • SHA256

    58b7e2b4af0eef2241d4050b9fcd23f1590b81b005f022f0d7e33c6d1cc61f62

  • SHA512

    e431bea3c4a82658e5483b866b4bca858dfd3aa50b63d98991f19a87977de85a6a43186c11158c035412a8dda023f2e2dfdaef4afe859e4c382fb0358ca09a04

  • SSDEEP

    98304:lOhIfAezMD/x/0feyGoQ940BDlgwdnpka9R/k9t+2MGt+bcgFhg:lwHHDfyGowBdnpkYRM6bF

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\58b7e2b4af0eef2241d4050b9fcd23f1590b81b005f022f0d7e33c6d1cc61f62.exe
    "C:\Users\Admin\AppData\Local\Temp\58b7e2b4af0eef2241d4050b9fcd23f1590b81b005f022f0d7e33c6d1cc61f62.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3708
    • C:\Users\Admin\AppData\Local\Temp\58b7e2b4af0eef2241d4050b9fcd23f1590b81b005f022f0d7e33c6d1cc61f62.exe
      "C:\Users\Admin\AppData\Local\Temp\58b7e2b4af0eef2241d4050b9fcd23f1590b81b005f022f0d7e33c6d1cc61f62.exe"
      2⤵
      • Loads dropped DLL
      PID:4300
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4136 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:716

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\VCRUNTIME140.dll

      Filesize

      95KB

      MD5

      f34eb034aa4a9735218686590cba2e8b

      SHA1

      2bc20acdcb201676b77a66fa7ec6b53fa2644713

      SHA256

      9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

      SHA512

      d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\_bz2.pyd

      Filesize

      81KB

      MD5

      86d1b2a9070cd7d52124126a357ff067

      SHA1

      18e30446fe51ced706f62c3544a8c8fdc08de503

      SHA256

      62173a8fadd4bf4dd71ab89ea718754aa31620244372f0c5bbbae102e641a60e

      SHA512

      7db4b7e0c518a02ae901f4b24e3860122acc67e38e73f98f993fe99eb20bb3aa539db1ed40e63d6021861b54f34a5f5a364907ffd7da182adea68bbdd5c2b535

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\_decimal.pyd

      Filesize

      248KB

      MD5

      20c77203ddf9ff2ff96d6d11dea2edcf

      SHA1

      0d660b8d1161e72c993c6e2ab0292a409f6379a5

      SHA256

      9aac010a424c757c434c460c3c0a6515d7720966ab64bad667539282a17b4133

      SHA512

      2b24346ece2cbd1e9472a0e70768a8b4a5d2c12b3d83934f22ebdc9392d9023dcb44d2322ada9edbe2eb0e2c01b5742d2a83fa57ca23054080909ec6eb7cf3ca

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\_hashlib.pyd

      Filesize

      63KB

      MD5

      d4674750c732f0db4c4dd6a83a9124fe

      SHA1

      fd8d76817abc847bb8359a7c268acada9d26bfd5

      SHA256

      caa4d2f8795e9a55e128409cc016e2cc5c694cb026d7058fc561e4dd131ed1c9

      SHA512

      97d57cfb80dd9dd822f2f30f836e13a52f771ee8485bc0fd29236882970f6bfbdfaac3f2e333bba5c25c20255e8c0f5ad82d8bc8a6b6e2f7a07ea94a9149c81e

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\_lzma.pyd

      Filesize

      154KB

      MD5

      7447efd8d71e8a1929be0fac722b42dc

      SHA1

      6080c1b84c2dcbf03dcc2d95306615ff5fce49a6

      SHA256

      60793c8592193cfbd00fd3e5263be4315d650ba4f9e4fda9c45a10642fd998be

      SHA512

      c6295d45ed6c4f7534c1a38d47ddc55fea8b9f62bbdc0743e4d22e8ad0484984f8ab077b73e683d0a92d11bf6588a1ae395456cfa57da94bb2a6c4a1b07984de

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\_socket.pyd

      Filesize

      77KB

      MD5

      819166054fec07efcd1062f13c2147ee

      SHA1

      93868ebcd6e013fda9cd96d8065a1d70a66a2a26

      SHA256

      e6deb751039cd5424a139708475ce83f9c042d43e650765a716cb4a924b07e4f

      SHA512

      da3a440c94cb99b8af7d2bc8f8f0631ae9c112bd04badf200edbf7ea0c48d012843b4a9fb9f1e6d3a9674fd3d4eb6f0fa78fd1121fad1f01f3b981028538b666

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\base_library.zip

      Filesize

      859KB

      MD5

      483d9675ef53a13327e7dfc7d09f23fe

      SHA1

      2378f1db6292cd8dc4ad95763a42ad49aeb11337

      SHA256

      70c28ec0770edefcef46fa27aaa08ba8dc22a31acd6f84cb0b99257dca1b629e

      SHA512

      f905eb1817d7d4cc1f65e3a5a01bade761bca15c4a24af7097bc8f3f2b43b00e000d6ea23cd054c391d3fdc2f1114f2af43c8bb6d97c1a0ce747763260a864f5

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\libcrypto-1_1.dll

      Filesize

      3.3MB

      MD5

      9d7a0c99256c50afd5b0560ba2548930

      SHA1

      76bd9f13597a46f5283aa35c30b53c21976d0824

      SHA256

      9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939

      SHA512

      cb39aa99b9d98c735fdacf1c5ed68a4d09d11f30262b91f6aa48c3f8520eff95e499400d0ce7e280ca7a90ff6d7141d2d893ef0b33a8803a1cadb28ba9a9e3e2

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\python310.dll

      Filesize

      4.3MB

      MD5

      63a1fa9259a35eaeac04174cecb90048

      SHA1

      0dc0c91bcd6f69b80dcdd7e4020365dd7853885a

      SHA256

      14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed

      SHA512

      896caa053f48b1e4102e0f41a7d13d932a746eea69a894ae564ef5a84ef50890514deca6496e915aae40a500955220dbc1b1016fe0b8bcdde0ad81b2917dea8b

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\select.pyd

      Filesize

      29KB

      MD5

      a653f35d05d2f6debc5d34daddd3dfa1

      SHA1

      1a2ceec28ea44388f412420425665c3781af2435

      SHA256

      db85f2f94d4994283e1055057372594538ae11020389d966e45607413851d9e9

      SHA512

      5aede99c3be25b1a962261b183ae7a7fb92cb0cb866065dc9cd7bb5ff6f41cc8813d2cc9de54670a27b3ad07a33b833eaa95a5b46dad7763ca97dfa0c1ce54c9

    • C:\Users\Admin\AppData\Local\Temp\_MEI37082\unicodedata.pyd

      Filesize

      1.1MB

      MD5

      81d62ad36cbddb4e57a91018f3c0816e

      SHA1

      fe4a4fc35df240b50db22b35824e4826059a807b

      SHA256

      1fb2d66c056f69e8bbdd8c6c910e72697874dae680264f8fb4b4df19af98aa2e

      SHA512

      7d15d741378e671591356dfaad4e1e03d3f5456cbdf87579b61d02a4a52ab9b6ecbffad3274cede8c876ea19eaeb8ba4372ad5986744d430a29f50b9caffb75d