Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    03-07-2024 11:22

General

  • Target

    netmamaSETUP.exe

  • Size

    8.3MB

  • MD5

    9b1bdf744ef8ad0c7a8b590cc3a1f3c1

  • SHA1

    712a1b46958198a169e0b5e085fedff88b711dda

  • SHA256

    00c83852c795422b473618da0ea332bd6cd4672a0e885fdd700b0ac298bb9dae

  • SHA512

    58e82a7e2bc6f0aa5f5445db94677a9856d665a619d4f2d2076d36a741b949761fdfc679002115a3917fd37f8b15db07cf7c7fe2777fd9b260dffa07def5f7e7

  • SSDEEP

    196608:K5g01VklAZ+kFJIfTObPCMIgjVLWqTV+JmPMZGfjq:K5gGZ+kgS79jTV+Ofjq

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\netmamaSETUP.exe
    "C:\Users\Admin\AppData\Local\Temp\netmamaSETUP.exe"
    1⤵
    • Loads dropped DLL
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\GLC1796.tmp

    Filesize

    161KB

    MD5

    8c97d8bb1470c6498e47b12c5a03ce39

    SHA1

    15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7

    SHA256

    a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a

    SHA512

    7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f

  • \Users\Admin\AppData\Local\Temp\GLF1DC2.tmp

    Filesize

    10KB

    MD5

    3b2e23d259394c701050486e642d14fa

    SHA1

    4e9661c4ba84400146b80b905f46a0f7ef4d62eb

    SHA256

    166d7156142f3ee09fa69eb617dd22e4fd248aa80a1ac08767db6ad99a2705c1

    SHA512

    2b792296dffa4e43bc85295dc7691bd29762ce5d9d5eafaa74e199e6a8e5b24aa85d0a1b27776d4719a49b0d29abcf6f240746a209528e608b596b560e5a3b88

  • \Users\Admin\AppData\Local\Temp\GLK19AA.tmp

    Filesize

    33KB

    MD5

    194147def60bc747c64eb009426bb320

    SHA1

    995f3bdf8cc5dce56a468a4f8c23ba965d0020b5

    SHA256

    956dee9fb241f37b936ec5f046693ba46af8dffa6c826d32bad218f79dff1b89

    SHA512

    e48a87ed1dab4c1fbf1d4eddd1be9e477e95acc1d2155a34d7dfb6ec83ccfe1b36d3bae44a219d6b8f7e1d6ef1e9a1a1444ffe8a6b766b667015cf27fd22d433