Overview

overview

7

Static

static

3

TNT-RAID.exe

windows7-x64

7

TNT-RAID.exe

windows10-2004-x64

7

main.pyc

windows7-x64

3

main.pyc

windows10-2004-x64

3

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/06/2024, 00:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TNT-RAID.exe

  • Size

    7.5MB

  • MD5

    d6f2044a0b633e39a5c1dc80b087b32e

  • SHA1

    b3a373f861a883669350512c932cc4fefe9620db

  • SHA256

    75ed7285f35d2faf4c4716d41e9a5879c2cf6372ebb8d7494a18f2140e1adb20

  • SHA512

    d8e0afe9801cd22c15e59945aa3cce1bb8a2f808625431b7941acafe947d326d0604a98a4400815a57bf75f32648255a0614d3f4dc1cc24718cace8606f30a3d

  • SSDEEP

    196608:JshPeIFMe9onJ5hrZERoyiU8AdZYJERw/jrTHJ2:cf9c5hlER0AdZYyErTJ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TNT-RAID.exe
    "C:\Users\Admin\AppData\Local\Temp\TNT-RAID.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Users\Admin\AppData\Local\Temp\TNT-RAID.exe
      "C:\Users\Admin\AppData\Local\Temp\TNT-RAID.exe"
      2⤵
      • Loads dropped DLL
      PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI22522\api-ms-win-core-file-l2-1-0.dll
    Filesize

    18KB

    MD5

    adb3471f89e47cd93b6854d629906809

    SHA1

    2cfc0c379fd7f23db64d15bdff2925778ff65188

    SHA256

    355633a84db0816ab6a340a086fb41c65854c313bd08d427a17389c42a1e5b69

    SHA512

    f53e11aa35911d226b676d454e873d0e84c189dd1caea8a0fe54d738933cd6b139eca48630f37f5979ef898950d99f3277cba6c7a697103f505d876bea62818c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI22522\api-ms-win-core-localization-l1-2-0.dll
    Filesize

    20KB

    MD5

    6b4f2ca3efceb2c21e93f92cdc150a9d

    SHA1

    2532af7a64ef4b5154752f61290dcf9ebeea290f

    SHA256

    b39a515b9e48fc6589703d45e14dcea2273a02d7fa6f2e1d17985c0228d32564

    SHA512

    63a42dd1cb95fd38ddde562108c78e39cb5d7c9406bf749339e717c2cd866f26268d49b6bd966b338de1c557a426a01a24c2480f64762fef587bc09d44ada53b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI22522\api-ms-win-core-processthreads-l1-1-1.dll
    Filesize

    18KB

    MD5

    247061d7c5542286aeddade76897f404

    SHA1

    7285f85440b6eff8731943b73502f58ae40e95a2

    SHA256

    ccb974c24ddfa7446278ca55fc8b236d0605d2caaf273db8390d1813fc70cd5b

    SHA512

    23ef467f6bb336d3e8c38000d30a92dac68e2662891863475ff18dbddbbbce909c12d241b86dbdea085e7d19c82cd20d80a60ffb2845f6afebedf06507afe5bc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI22522\api-ms-win-core-timezone-l1-1-0.dll
    Filesize

    18KB

    MD5

    bdd63ea2508c27b43e6d52b10da16915

    SHA1

    2a379a1ac406f70002f200e1af4fed95b62e7cb8

    SHA256

    7d4252ab1b79c5801b58a08ce16efd3b30d8235733028e5823f3709bd0a98bcf

    SHA512

    b0393f0d2eb2173766238d2139ae7dea7a456606f7cb1b0e8bc0375a405bc25d28ef1c804802dddb5c3dbd88cfd047bfa5c93cbb475d1d6b5a9a893b51e25128

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI22522\python39.dll
    Filesize

    4.3MB

    MD5

    11c051f93c922d6b6b4829772f27a5be

    SHA1

    42fbdf3403a4bc3d46d348ca37a9f835e073d440

    SHA256

    0eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c

    SHA512

    1cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI22522\ucrtbase.dll
    Filesize

    959KB

    MD5

    34168a4af676d6a5733bbf7a0905d3c7

    SHA1

    ba63e51ab3cd90666eb9a9bb0232502a5ec629ff

    SHA256

    2ab2a74bcb5bfd8248d232eb3bc56698fb5173b9ff7fc0daf87d8120d0f448d7

    SHA512

    c049c166b2b00dc30b0edae5d78badfffea7fb105f0cff9f3ae2c947ddf3ecde6331855b7ebed3f4ce923cc365b053b3a679319b2c6efa85ed0b9a7ddb5676ab

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI22522\api-ms-win-core-file-l1-2-0.dll
    Filesize

    18KB

    MD5

    19df2b0f78dc3d8c470e836bae85e1ff

    SHA1

    03f2b5b848a51ee52980bf8595c559b89865de07

    SHA256

    bd9e07bbc62ce82dbc30c23069a17fbfa17f1c26a9c19e50fe754d494e6cd0b1

    SHA512

    c1c2b97f484e640bfdda17f7ed604d0583c3d4eaf21abf35491ccedc37fa4866480b59a692776687e5fda3eaeafb4c7bdb34dec91f996fd377a328a89c8d5724

    Download Submit