Overview

overview

7

Static

static

3

massdm_1.exe

windows7-x64

7

massdm_1.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    98s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/06/2024, 09:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    massdm_1.exe
  • Size 8.2MB
  • Sample240605-lcb3facf69
  • SHA256 275aacc2cec3ea050be9fb7aae0a2325d24fc5381152a4e667fb2f06658a0136
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 27 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\massdm_1.exe
    "C:\Users\Admin\AppData\Local\Temp\massdm_1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3512
    • C:\Users\Admin\AppData\Local\Temp\massdm_1.exe
      "C:\Users\Admin\AppData\Local\Temp\massdm_1.exe"
      2⤵
      • Loads dropped DLL
      PID:3584

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\VCRUNTIME140.dll
        • Size 91KB
        • SHA256 8ee6b49830436ff3bec9ba89213395427b5535813930489f118721fd3d2d942c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_asyncio.pyd
        • Size 63KB
        • SHA256 d1f458227ecf60d389145175fa0b61656ecac2fb80d9bb89e04cdf273e67c543
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_bz2.pyd
        • Size 84KB
        • SHA256 6c2bbed242c399c4bc9b33268afe538cf1dea494c75c8d0db786030a0dcc4b7e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_ctypes.pyd
        • Size 123KB
        • SHA256 c1e3e9548243ca523f1941990477723f57a1052965fccc8f10c2cfae414a6b8a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_hashlib.pyd
        • Size 64KB
        • SHA256 8aa7abe0a92a89adf821e4eb783ad254a19858e62d99f80eb5872d81e8b3541c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_lzma.pyd
        • Size 158KB
        • SHA256 ac0ceb8e6b5e67525b136b5ce97500fe4f152061b1bf2783f127eff557b248a3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_overlapped.pyd
        • Size 45KB
        • SHA256 c67bf0303c504f3605a6d4c396a1e30e35b64d1a1e39dd36943d8cc7f69a6097
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_queue.pyd
        • Size 28KB
        • SHA256 a7cdedaa58c7ba9aba98193fce599598d2cd35ed9c80d1ad7fc9e6182c9a25d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_socket.pyd
        • Size 78KB
        • SHA256 09ab789238120df329956278f68a683210692c9bcccb8cd548c771e7f9711869
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_ssl.pyd
        • Size 150KB
        • SHA256 2b16154826a417c41cda72190b0cbcf0c05c6e6fe44bf06e680a407138402c01
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\_uuid.pyd
        • Size 22KB
        • SHA256 cb195b5aae6a7969174e8c7c6f9e2b40683190f6b4e410233022df1b6dade731
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _frozenlist.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\aiohttp\_frozenlist.cp39-win_amd64.pyd
        • Size 63KB
        • SHA256 9d692c222721edd6b1d16fca3c8cfabc2128e1566534878bd0c029c417049f8a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _helpers.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\aiohttp\_helpers.cp39-win_amd64.pyd
        • Size 47KB
        • SHA256 b667e8e7a5e5d370cacc7c84f208fb2bbecf5e869ae78cfa728a5605455c2a12
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _http_parser.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\aiohttp\_http_parser.cp39-win_amd64.pyd
        • Size 230KB
        • SHA256 c43a1401e524d8c883c339be143d5b8df66e185a4cf04760750c081aa84c9e7c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _http_writer.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\aiohttp\_http_writer.cp39-win_amd64.pyd
        • Size 41KB
        • SHA256 2d8d172e786f3b9481afd71b53ce92364f0575daede375132afc54a7b188360b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _websocket.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\aiohttp\_websocket.cp39-win_amd64.pyd
        • Size 27KB
        • SHA256 78c2f6b08d4cfa155f49ef98401baebde32ac88209c4508fc2e3528376dd372c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\base_library.zip
        • Size 769KB
        • SHA256 a46f4b1561decd4bc8b6475e05cd66e318ec19fc44ff38a46a4207e0519e1a87
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cacert.pem
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\certifi\cacert.pem
        • Size 257KB
        • SHA256 bb77f13d3fbec9e98bbf28ac95046b44196c7d8f55ab7720061e99991a829197
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\libcrypto-1_1.dll
        • Size 3.2MB
        • SHA256 594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\libssl-1_1.dll
        • Size 673KB
        • SHA256 9d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _multidict.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\multidict\_multidict.cp39-win_amd64.pyd
        • Size 43KB
        • SHA256 9fb82e21ee4f4d37d019b7053e6be4d9eed8c92cd12a3f7211125032c6e8cb22
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _sodium.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\nacl\_sodium.pyd
        • Size 336KB
        • SHA256 ca83a6731e6d49ccb86d94601b148bd4cc36ad89f9cdaae6eec46481047d13ec
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\python3.DLL
        • Size 58KB
        • SHA256 e9e4a9b271b692c331dc091825ac1ff51b01cd159f2e5c2553756c79ff272fa2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python39.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\python39.dll
        • Size 4.2MB
        • SHA256 53f27444e1e18cc39bdb733d19111e392769e428b518c0fc0839965b5a5727a2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\select.pyd
        • Size 27KB
        • SHA256 b26b6631d433af5d63b8e7cda221b578e7236c8b34b3cffcf7630f2e83fc8434
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\unicodedata.pyd
        • Size 1.1MB
        • SHA256 9be2b4c7db2c3a05ec3cbd08970e622fcaeb4091a55878df12995f2aeb727e72
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _quoting_c.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35122\yarl\_quoting_c.cp39-win_amd64.pyd
        • Size 78KB
        • SHA256 e7af21ec47fa1aea28ecc7516b389102514e9e5720b4af89e7aa48b489d4a500
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download