fdd2551696ea2f0d3ee85b0087e43056cc976055be13977c9ece574a11704cfe

Analysis

max time kernel
76s
max time network
103s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
08/06/2024, 17:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
install_all/vcredist2008_x86.exe
Size 4.3MB
Sample240608-vvze5aee82
SHA256 6b3e4c51c6c0e5f68c8a72b497445af3dbf976394cbb62aa23569065c28deeb6
MD5 35da2bf2befd998980a495b6f4f55e60
SHA1 470640aa4bb7db8e69196b5edb0010933569e98d
SHA512 bf630667c87b8f10ef85b61f2f379d7ce24124618b999babfec8e2df424eb494b8f1bf0977580810dff5124d4dbdec9539ff53e0dc14625c076fa34dfe44e3f2
SSDEEP 98304:vT4tlQ0aeY51XNURYxaA6qjEb9tRuPmBmWBDLTMTtbslyzRt9cuISY6Qa:vKlhE9U6476itR+mLPw6lyZY61
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4260	install.exe

Loads dropped DLL 1 IoCs

pid	Process
4260	install.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3312 wrote to memory of 4260	3312	vcredist2008_x86.exe	79
PID 3312 wrote to memory of 4260	3312	vcredist2008_x86.exe	79
PID 3312 wrote to memory of 4260	3312	vcredist2008_x86.exe	79

C:\Users\Admin\AppData\Local\Temp\install_all\vcredist2008_x86.exe
"C:\Users\Admin\AppData\Local\Temp\install_all\vcredist2008_x86.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3312
- \??\c:\273c69d24233e087eb35a8499c9e0e33\install.exe
  c:\273c69d24233e087eb35a8499c9e0e33\.\install.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

install.exe

Path C:\273c69d24233e087eb35a8499c9e0e33\install.exe
Size 547KB
SHA256 b72056fc3df6f46069294c243fe5006879bf4a9d8eef388369a590ca41745f29
MD5 4138c31964fbcb3b7418e086933324c3
SHA1 97cc6f58fb064ab6c4a2f02fb665fef77d30532f
SHA512 40cf2f35c3a944fca93d58d66465f0308197f5485381ff07d3065e0f59e94fc3834313068e4e5e5da395413ff2d3d1c3ff6fa050f2256e118972bf21a5643557
SSDEEP 12288:hkjNFCqa3Gypbl+3/Rfut4oTxZavud30BuK:huO+3/FulZavC30YK
MD5 SHA1 SHA512 SSDEEP

Submit Download

globdata.ini

Path \??\c:\273c69d24233e087eb35a8499c9e0e33\globdata.ini
Size 1KB
SHA256 7912e3fcf2698cf4f8625e563cd8215c6668739cae18bd6f27af2d25bec5c951
MD5 0a6b586fabd072bd7382b5e24194eac7
SHA1 60e3c7215c1a40fbfb3016d52c2de44592f8ca95
SHA512 b96b0448e9f0e94a7867b6bb103979e9ef2c0e074bcb85988d450d63de6edcf21dc83bb154aafb7de524af3c3734f0bb1ba649db0408612479322e1aa85be9f4
MD5 SHA1 SHA512

Submit Download

install.ini

Path \??\c:\273c69d24233e087eb35a8499c9e0e33\install.ini
Size 841B
SHA256 c16727881c47a40077dc5a1f1ea71cbb28e3f4e156c0ae7074c6d7f5ecece21d
MD5 f8f6c0e030cb622f065fe47d61da91d7
SHA1 cf6fa99747de8f35c6aea52df234c9c57583baa3
SHA512 b70c6d67dac5e6a0dbd17e3bcf570a95914482abad20d0304c02da22231070b4bc887720dbae972bc5066457e1273b68fde0805f1c1791e9466a5ca343485cde
MD5 SHA1 SHA512

Submit Download

install.res.1033.dll

Path \??\c:\273c69d24233e087eb35a8499c9e0e33\install.res.1033.dll
Size 85KB
SHA256 a522c5ea3250cdd538a9ce7b4a06dfd5123e7eb05eef67509f2b975a8e1d3067
MD5 ff6003014eefc9c30abe20e3e1f5fbe8
SHA1 4a5bd05f94545f01efc10232385b8fecad300678
SHA512 3adc5c705bab7fa7b50517a5eb3301491f5150b56e1088ed436590458e963da204cd1875af75db89742403476a56a94c3f425c05327767bdb4bbee4859667ac2
SSDEEP 768:hN/14PhLnHqCHyDRO6ApsnzwPu1+IiPMRpfrO/CaqpuK6tmbb6FjpvB/p:F4PhLsOazwPIRpfrO/Cajg6F5B/p
MD5 SHA1 SHA512 SSDEEP

Submit Download

vc_red.msi

Path \??\c:\273c69d24233e087eb35a8499c9e0e33\vc_red.msi
Size 222KB
SHA256 34c5e7d7ea270ee67f92d34843d89603d6d3b6d9ef5247b43ae3c59c909d380d
MD5 7e641e6a0b456271745c20c3bb8a18f9
SHA1 ae6cedcb81dc443611a310140ae4671789dbbf3a
SHA512 f67d6bf69d094edcc93541332f31b326131ff89672edb30fd349def6952ad8bfd07dc2f0ca5967b48a7589eee5b7a14b9a2c1ebe0cba4ae2324f7957090ea903
SSDEEP 3072:vZhXppF5fyi9JXgvJVJS5pNF531iBkNmGK0+E4mN2EJojF5:p1/QvzJOXvU+0
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist.bmp

Path \??\c:\273c69d24233e087eb35a8499c9e0e33\vcredist.bmp
Size 5KB
SHA256 594884a8006e24ad5b1578cd7c75aca21171bb079ebdc4f6518905bcf2237ba1
MD5 06fba95313f26e300917c6cea4480890
SHA1 31beee44776f114078fc403e405eaa5936c4bc3b
SHA512 7dca0f1ab5d3fd1ac8755142a7ca4d085bb0c2f12a7272e56159dadfa22da79ec8261815be71b9f5e7c32f6e8121ecb2443060f7db76feaf01eb193200e67dfd
SSDEEP 24:pS75l775l7aqV7j7Q55okTg2vrlgprDDcaWJQvS2PRSmob6SHSl4CiZ:pKV7j7AXgbjlLI
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/4260-33-0x00000000022B0000-0x00000000022B1000-memory.dmp

Download

memory/4260-36-0x00000000022B0000-0x00000000022B1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads