Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/06/2024, 22:03
Behavioral task
behavioral1
Sample
51ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
51ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049.exe
Resource
win10v2004-20240508-en
General
-
Target
51ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049.exe
-
Size
81KB
-
MD5
a6d68c0136b73e29e2a21dccca766ea5
-
SHA1
381e61b4aac06a9fdc8ed0a9fb4de53d0121602b
-
SHA256
51ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049
-
SHA512
4e6f7778a4c0b25e2572edc5a9f535905c098c37624711bcbc1684e10ebc03fd9946a05764273638031bc083d37a9dd633d8108477ab8e8d7699e76be304cea8
-
SSDEEP
1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2YRmA7hGRLlpLTO27UQsGk:MHoLde/OgV432UcP39hXJZn/UE4l5wVF
Malware Config
Signatures
-
Modifies AppInit DLL entries 2 TTPs
-
resource yara_rule behavioral1/memory/2456-112-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral1/files/0x0007000000015c87-11.dat upx behavioral1/memory/2456-4-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral1/memory/2456-0-0x0000000000400000-0x0000000000429000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\Wqk.dll 51ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049.exe File created C:\Windows\SysWOW64\Wqk.dll 51ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\dextor32.exe 51ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
81KB
MD5a6d68c0136b73e29e2a21dccca766ea5
SHA1381e61b4aac06a9fdc8ed0a9fb4de53d0121602b
SHA25651ecbac3dd3171d8db96cb7b78954ee16a6998a137df6c15f3f5ad2ff9526049
SHA5124e6f7778a4c0b25e2572edc5a9f535905c098c37624711bcbc1684e10ebc03fd9946a05764273638031bc083d37a9dd633d8108477ab8e8d7699e76be304cea8