Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 11:26

General

  • Target

    test.exe

  • Size

    596KB

  • MD5

    a1878b565203e5a3876c3fbc171d6a48

  • SHA1

    bc1eb9d688c9450aeed477e695b68615c3e5efab

  • SHA256

    c7da839d1af6e7c18d2140790a59240db1bc89e853d1e902e971f4519ad4ae79

  • SHA512

    4cc953770e45de20b1b469357058ff24da8da72166b60e1e799d21c1e91eca70663aa2128da0e3b75d0c84b83bccb9777a4a43423e0c7e6a1b03b6ee01dbb92c

  • SSDEEP

    12288:MjMqKAXm+7SLcWrbHySzFkKykWxSGCJg74VWw32g1IdQwaGV3UuDfA0E2zdWeov2:QrFWrbHbFkkgvCJg7AW8

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\test.exe
    "C:\Users\Admin\AppData\Local\Temp\test.exe"
    1⤵
    • Loads dropped DLL
    PID:1996

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Roaming\d3d9.dll

          Filesize

          429KB

          MD5

          f177c62b0b5cd9834b4523024ff487df

          SHA1

          4b0ad54e73b2ece57cfb444d699fb47d15e8bc61

          SHA256

          b893019e6448e022e4216d3195c4274e069aee8e689c101de8c22ffbb2305ceb

          SHA512

          cbbb307558cbb4c3aafd1536d6d69377da04d8f885b9ddd778ce71f4eb7dd34f1dd0512f9ec726e2c0cf50d05f239ac8667def5774e9c1ec4579ce80005f3f2e

        • memory/1996-0-0x00000000743AE000-0x00000000743AF000-memory.dmp

          Filesize

          4KB

        • memory/1996-1-0x0000000001280000-0x000000000131E000-memory.dmp

          Filesize

          632KB

        • memory/1996-2-0x00000000003C0000-0x00000000003C6000-memory.dmp

          Filesize

          24KB

        • memory/1996-7-0x0000000075000000-0x00000000750C1000-memory.dmp

          Filesize

          772KB

        • memory/1996-8-0x00000000743A0000-0x0000000074A8E000-memory.dmp

          Filesize

          6.9MB