Overview

overview

10

Static

static

10

339a5d73c9...3f.exe

windows7-x64

7

339a5d73c9...3f.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/06/2024, 01:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f.exe
  • Size 35.2MB
  • Sample240616-bzfc9stfpe
  • SHA256 339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 26 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f.exe
    "C:\Users\Admin\AppData\Local\Temp\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f.exe"
    1⤵
    • Loads dropped DLL
    PID:3564

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Google.Protobuf.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\Google.Protobuf.dll
        • Size 388KB
        • SHA256 c32e70cfd3abfb2c2381a434f57b5616da6c7dcd8457d2f7db1de0d53646e2a1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Microsoft.Win32.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\Microsoft.Win32.Primitives.dll
        • Size 7KB
        • SHA256 801a02e48db21fe906f2c5bdd7954f112b3ce95180e56d298e5f20e6031d5635
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        RWDWrapper.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\RWDWrapper.dll
        • Size 140KB
        • SHA256 f1abb17ca825223cc3897ff6064734e4c2c8441f755c8cbde1e0a6ae53c96283
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        RWDetectCore.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\RWDetectCore.dll
        • Size 250KB
        • SHA256 ae52e40224029b2abb4369a842ff8533951af5bbf8c0b991874a4685498bc27d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.ComponentModel.Primitives.dll
        • Size 21KB
        • SHA256 d5663d4ef35bc38218d7b77b7f03c5c836c3abf712e3f6413c0945d458f6d730
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.Console.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.Console.dll
        • Size 61KB
        • SHA256 306275d797992b656ac6ffa87b1b36f9b0df9f0fc35e8f39aa9330d77dba95dc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.Diagnostics.Process.dll
        • Size 103KB
        • SHA256 d6d57ef90d2c5bb32880add8510bbabacd909cdecc428776d68b7d5e0011a549
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.IO.FileSystem.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.IO.FileSystem.dll
        • Size 84KB
        • SHA256 153fb51ac6e06d59ad78d77ef04e441157262bb8c6461549ebd79dd5b99faf56
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.Private.CoreLib.dll
        • Size 8.3MB
        • SHA256 b39ce8db3a0202160533d868dffbb6295fbe4e4f0191cc99566a41a232f1de33
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.Security.Claims.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.Security.Claims.dll
        • Size 38KB
        • SHA256 4b53f524266f19ee6caa250170aaf74ddbd56c1a5f0e8e77cc22f2cca45dee77
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.Security.Principal.Windows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.Security.Principal.Windows.dll
        • Size 70KB
        • SHA256 6ab14f9e5465679eb1eaf8fc6d60da0e6b83953e916d44fedbb7a669a1dd2e6f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.Security.Principal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\System.Security.Principal.dll
        • Size 14KB
        • SHA256 55667d06c50f9578688d3442f0806271d21709068e0522519602b9c9923cec50
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        clrjit.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\clrjit.dll
        • Size 1.1MB
        • SHA256 02c9cfd7d8e2ac05848b5babf5f1b1f814974fe4c76f78fa7fd2028d60f4920b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        coreclr.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\coreclr.dll
        • Size 4.1MB
        • SHA256 87101d385993e908ce389d02ea678ec262699004fedf9312471dae9508b6d039
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hostfxr.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\hostfxr.dll
        • Size 460KB
        • SHA256 eca52750458735e777da61d34ed9a647afc363ad45eecae3828d0de841c8357e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hostpolicy.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\339a5d73c9d79aa4453c61bb915a895bf8495c562937f19f22136caa61f8fd3f\qrbbwuin.lf4\hostpolicy.dll
        • Size 456KB
        • SHA256 4fbf2e5ee0cad1b58a04ca39b1c02b081fc7c4fb640db03c93c35f3536438993
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/3564-148-0x000000007522A000-0x000000007522B000-memory.dmp
        Download