Analysis
-
max time kernel
128s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10-07-2024 05:35
General
-
Target
WeChatSetup.exe
-
Size
245.2MB
-
MD5
7377170ac9bfd90d056012af8613c310
-
SHA1
e1c44dd59cad4c513fe6384fad5accc10cdfecec
-
SHA256
243f3743b7c0353104dffd185aa6d754407e7b31c3840e30fdc5ec66d7f1c11b
-
SHA512
3919294ef33107540ae1f4fe4bec93c74126ebb900000869d8f08ec528668b34e35673b29c266a3fd9e666112f49ade7ff187956ecc08572f05009a09e9bb931
-
SSDEEP
6291456:Z1jOBQPyYOKF7+6aYG9R1BWj15Do2ATZTNRF4uHio/KjNf:ZZOBQEg+6KWpmBNP4uHfKjNf
Malware Config
Signatures
-
Loads dropped DLL 18 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 30 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WeChatSetup.exe"C:\Users\Admin\AppData\Local\Temp\WeChatSetup.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
492KB
MD5633625aa3be670a515fa87ff3a566d90
SHA1de035c083125aef5df0a55c153ef6cc4dd4c15b4
SHA256bda8e0ddb672ea3558ad68634c49da06cd72f93d7fca642ca41df00e26512df1
SHA5123c687ddf0e4e93a6787a23a93e2011df42898f6d21101c848a1b7c7bd2eddd5d49fdd0748e47e6235e7808596d00a1ecf79b5c975d050dd8d00a95f515a444a9
-
Filesize
11KB
MD5ca332bb753b0775d5e806e236ddcec55
SHA1f35ef76592f20850baef2ebbd3c9a2cfb5ad8d8f
SHA256df5ae79fa558dc7af244ec6e53939563b966e7dbd8867e114e928678dbd56e5d
SHA5122de0956a1ad58ad7086e427e89b819089f2a7f1e4133ed2a0a736adc0614e8588ebe2d97f1b59ab8886d662aeb40e0b4838c6a65fbfc652253e3a45664a03a00
-
Filesize
3.6MB
MD5334057ab4993b56c8c663b0224b94567
SHA109a428a52707171f425d9047e1b89bde1d5966dd
SHA2563f829f072de5cc33b160f15f62558c86f75f7f96a2673234c9a48c3164f067d1
SHA5123b40102c35a946a2ac804b680c61cabe0782b1d334d98d2f7aec5bf3946c2ab80098b0399eb69a1d7aca37073e11dacb6876c977415082fea480d9e4f5762d03
-
Filesize
192KB
MD528b411f3793dbcb81d6f3d3b0527cdba
SHA17614310be1231850e811a818f58ee8b54ae9ceaf
SHA2560281e384c94cad29fd8279c1855f671c2dd1f7772cf5645f573dd1df2b3bd127
SHA512e5c9f21e9838eca54a8ededb1bf279453e116b6cde629a75ad057b6438deec6bcacf6e27a81c8aa0fc732f26dc28cee7a006ba6d68c08846b92937e388349d78
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
200KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB