7ba9bcd9e41688527773357652568e840f8569b1692a02182a701527ed431b74

Resubmissions

09/06/2024, 08:44

240609-knmgwagc4s 3

09/06/2024, 08:31

240609-kexw9agb5x 7

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
09/06/2024, 08:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

vcredist_x64.exe
Size

4.7MB
MD5

40395c175553cb14d2050888efccdf00
SHA1

13674c43652b941dafd2049989afce63cb7c517b
SHA256

55bf99ad3f063165c3ee1626787b5d4c2b65b5001fef79dd58c3490369ed282f
SHA512

95f7596fbd76538ff2026b2232e0e7caf517ab4f60556e875e1538254a5c417cf8b82aaaebaabdf2eb33729b986b3ac6a870a62fdfc582f5218babafa4fceb14
SSDEEP

98304:RfN8nttZrMa2xOy8MdEZZAFvdpf3yxy+K1hjknd8VxwyhSJQlWf:RanhAxOyMAFvdtyxzK1mO/Zkf

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
2360	install.exe
1216	Process not Found

Loads dropped DLL 5 IoCs

pid	Process
2792	vcredist_x64.exe
2792	vcredist_x64.exe
2360	install.exe
852	Process not Found
852	Process not Found

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2792 wrote to memory of 2360	2792	vcredist_x64.exe	28
PID 2792 wrote to memory of 2360	2792	vcredist_x64.exe	28
PID 2792 wrote to memory of 2360	2792	vcredist_x64.exe	28
PID 2792 wrote to memory of 2360	2792	vcredist_x64.exe	28

C:\Users\Admin\AppData\Local\Temp\vcredist_x64.exe
"C:\Users\Admin\AppData\Local\Temp\vcredist_x64.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2792
- \??\c:\ab717c26e2b7a6bcf608fb98\install.exe
  c:\ab717c26e2b7a6bcf608fb98\.\install.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

\??\c:\ab717c26e2b7a6bcf608fb98\eula.1033.txt

Filesize
9KB

MD5
162fc8231b1bd62f1d24024bb70140d5

SHA1
7fa4601390f1a69b4824ee1334bee772c2941a24

SHA256
c68a0fd93e8c64139a42af4fcd4670c6faea3a5d5d1e9dd35b197f7d5268d92b

SHA512
a707b5ef0e914ba61e815be5224831441922ed8d933f7a2ffe8aecf41f5a1790a1e45981f19d86aa5eab5ea73d03b0c8e2ab6b9f398ab0154d1c828da6f6beda

Download Submit
\??\c:\ab717c26e2b7a6bcf608fb98\globdata.ini

Filesize
1KB

MD5
0a6b586fabd072bd7382b5e24194eac7

SHA1
60e3c7215c1a40fbfb3016d52c2de44592f8ca95

SHA256
7912e3fcf2698cf4f8625e563cd8215c6668739cae18bd6f27af2d25bec5c951

SHA512
b96b0448e9f0e94a7867b6bb103979e9ef2c0e074bcb85988d450d63de6edcf21dc83bb154aafb7de524af3c3734f0bb1ba649db0408612479322e1aa85be9f4

Download Submit
\??\c:\ab717c26e2b7a6bcf608fb98\install.ini

Filesize
844B

MD5
5feaa6a36fea7dfdb88c18d69ba6d6a9

SHA1
7afd91a7b046d68b6ee9fd367bcd7a4fec546216

SHA256
67a50ffbb8a1d500eaa4d9f0227d6a8595a2750154e6b31662fc4f51286e47fc

SHA512
6c8c0456f232a02a49d51b3f1a830a18b9078e621cd0dc3f4f76f79b83035e8affac67bce3af9a37fa9096a34a8499c59cf982b63a4b2400b9190d2db293e682

Download Submit
\??\c:\ab717c26e2b7a6bcf608fb98\install.res.1033.dll

Filesize
88KB

MD5
644f7a3778dba970902f59ef1217e383

SHA1
edcb1dbdfc484e33db714fed7ee3bbee1b0004f8

SHA256
95fe2c2979e331d725825b30422da1337266e7d4a029ed43e0312695f442db36

SHA512
b4d2dff18265b33930608c5a7d532b2a6156bafeb410708c238c2f1f90990c5def3b8d1a2643e91c553cffd0f436719392c0bb6dc0189f4123905866a94a56e2

Download Submit
\??\c:\ab717c26e2b7a6bcf608fb98\vc_red.msi

Filesize
236KB

MD5
77a421c01414d744315f7b5c1d9e3150

SHA1
c7c5747135931800bad55d58bd523691364fcde0

SHA256
3e7c86e3dfddc6d587cd0b1bae0e73dcaccfd865962b3985c39009ec8926ae5f

SHA512
312c4e882586b7e3f030e0f566ba0e96dc1bafbc882e3eb6774244b35365859ff815b78252fc4c6c063aeccc97a0594d00b74d97a7e5a9ed642d99f837f8230c

Download Submit
\??\c:\ab717c26e2b7a6bcf608fb98\vcredist.bmp

Filesize
5KB

MD5
06fba95313f26e300917c6cea4480890

SHA1
31beee44776f114078fc403e405eaa5936c4bc3b

SHA256
594884a8006e24ad5b1578cd7c75aca21171bb079ebdc4f6518905bcf2237ba1

SHA512
7dca0f1ab5d3fd1ac8755142a7ca4d085bb0c2f12a7272e56159dadfa22da79ec8261815be71b9f5e7c32f6e8121ecb2443060f7db76feaf01eb193200e67dfd

Download Submit
\ab717c26e2b7a6bcf608fb98\install.exe

Filesize
835KB

MD5
87603ea025623b19954e460add532048

SHA1
d27fc9abbeccb60906d22906ef9a73bd05da2b7a

SHA256
8d08136a1964c72b6b450b11d9bf2b3d3d289c26dfadfc9f021114eac2cea1ca

SHA512
f2af8c8eab805a39ccd3ccc3b8d1c3401c81f1b3d2dbe719aa39f6fcc28af955d778465aec8b699460e6897629f758b7986b5f7fb4705ba174911c3736c4f520

Download Submit
memory/2360-53-0x0000000000110000-0x0000000000111000-memory.dmp

Filesize
4KB

Download
memory/2360-60-0x0000000000110000-0x0000000000111000-memory.dmp

Filesize
4KB

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads