Overview

overview

7

Static

static

3

b2c422f242...81.exe

windows7-x64

7

b2c422f242...81.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/06/2024, 07:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b2c422f242eae9bc5c6909f91b6438258fe90b6959ed1c8730836c2df6be3d81.exe
  • Size 5.4MB
  • Sample240609-hybf9agb38
  • SHA256 b2c422f242eae9bc5c6909f91b6438258fe90b6959ed1c8730836c2df6be3d81
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 8 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b2c422f242eae9bc5c6909f91b6438258fe90b6959ed1c8730836c2df6be3d81.exe
    "C:\Users\Admin\AppData\Local\Temp\b2c422f242eae9bc5c6909f91b6438258fe90b6959ed1c8730836c2df6be3d81.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Users\Admin\AppData\Local\Temp\b2c422f242eae9bc5c6909f91b6438258fe90b6959ed1c8730836c2df6be3d81.exe
      "C:\Users\Admin\AppData\Local\Temp\b2c422f242eae9bc5c6909f91b6438258fe90b6959ed1c8730836c2df6be3d81.exe"
      2⤵
      • Loads dropped DLL
      PID:3008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\_ctypes.pyd
        • Size 119KB
        • SHA256 6c560fb6bac55b5b75ecd80d6f6efe797544fb6db060818f0a6e510ac5abd191
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\_hashlib.pyd
        • Size 1.6MB
        • SHA256 11e2ba61c5d94999bace0bd8af8ce75dc10c2c494ebb4120367f7fc98209b61d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\_socket.pyd
        • Size 50KB
        • SHA256 ed53d4157e38ff8aec102a87ff7e2d6879b36eeffd301726047f7517243ab279
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\_ssl.pyd
        • Size 2.0MB
        • SHA256 260f8ab785e3b22c241d578a5442ff287b1bf13a886b077a105f0e85d1c3a774
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\bz2.pyd
        • Size 90KB
        • SHA256 72411f5d024cf86753ef40cbeacf564fb71410760035360f2c89932594082f5c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python27.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\python27.dll
        • Size 3.3MB
        • SHA256 38c4bdbc869139afcc8738924d400dea6f6e83eec91af29e176792e7c66bc1e0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\select.pyd
        • Size 11KB
        • SHA256 8affe8e006052571edcc086cef04df16c18b8c4de0584b80f870933f63fcd512
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        test.exe.manifest
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\test.exe.manifest
        • Size 1KB
        • SHA256 c02d36f5f55896fed8ec741c3fcbf20f14581895d06e7b77e0010960a0cfff36
        • MD5 SHA1 SHA512
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19362\unicodedata.pyd
        • Size 676KB
        • SHA256 8473ae688c862caf8f19ce6bb1bbbec1df8f44f9ddd3a9be8294a52a0d7b4d93
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/1936-31-0x0000000000400000-0x0000000000434000-memory.dmp
        Download

        memory/1936-41-0x0000000000400000-0x0000000000434000-memory.dmp
        Download

        memory/3008-32-0x0000000000400000-0x0000000000434000-memory.dmp
        Download

        memory/3008-35-0x0000000000400000-0x0000000000434000-memory.dmp
        Download