Analysis

  • max time kernel
    128s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-07-2024 15:41

General

  • Target

    mediarecoverdemo.exe

  • Size

    2.9MB

  • MD5

    505adf5efb78a3e84037b213e005be66

  • SHA1

    da1640242bd247f571698c2d991f78adeb254d13

  • SHA256

    4e506629f7d3b4705365985a2c0e2faa46593d51eee34fee97019806bded905f

  • SHA512

    398683f5be815f5a4e7133edd3fa1f68f41a4aeff68446ed245e304d21e934df56904ef152a928861dd7eb49622dc8ae09ed9b24fa17cc7a343dcaf33fb2141b

  • SSDEEP

    49152:nNSoJ7ruw4CLRt6Ues0CDB6W/Huel9nbH6EQTrfQgUEfEo63VYOk/V2pAxurKp7V:kC7iw4ChtjBdrtQfUEWU/0pw77LVD

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\mediarecoverdemo.exe
    "C:\Users\Admin\AppData\Local\Temp\mediarecoverdemo.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:3508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GLC376B.tmp

    Filesize

    161KB

    MD5

    09e59d00df5d2effd8dd9b30385cb9d2

    SHA1

    0fa0d3f6692f31fdabefb719b0f7a28cbf5d5415

    SHA256

    1c574eab5e83ccfe5a0bb7b59e028cc5fa2f4e77868051e305d83c709711ff77

    SHA512

    d73e3832777341a4176dbd9988002ec94a32f162492e869a8c03d9bb10f1833821f99e15710e9fc103a2820c862cf14a0b990d7c7c09150bb14618a7c93ca5fd

  • C:\Users\Admin\AppData\Local\Temp\GLK377C.tmp

    Filesize

    33KB

    MD5

    517419cae37f6c78c80f9b7d0fbb8661

    SHA1

    a9e419f3d9ef589522556e0920c84fe37a548873

    SHA256

    bfe7e013cfb85e78b994d3ad34eca08286494a835cb85f1d7bced3df6fe93a11

    SHA512

    5046565443cf463b6fa4d2d5868879efc6a9db969bf05e3c80725b99bd091ce062cfe66c5551eb1cc5f00a38f2cfcda1f36fb4d60d9ff816c4ec3107b5a0df40