Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/07/2024, 17:27

General

  • Target

    picsaver.exe

  • Size

    2.2MB

  • MD5

    1c3ce4c28636d90832de70fb9c102a20

  • SHA1

    4678dbd5489e52b8a3db7f8e2aa1d110a887fd74

  • SHA256

    154e4323ca12f95e78b0e024e4cb798cbcf83290ce2541900417bf35e69918a4

  • SHA512

    b4d8abf0bf66af90607ff628e0ea7fcb8e55f5f4032e0729a34a1f92ee48e5fcf7df20328286571100034c63d73ec8f8fa4142cc8ddf491da749753b6f870a3b

  • SSDEEP

    49152:6NSIld9NgD0hxC5PhE/tyYsbk7dsXa2xjVaomdk8N8pd285h:VIld9vhz/tNsARsXH9VaBq8YXh

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\picsaver.exe
    "C:\Users\Admin\AppData\Local\Temp\picsaver.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2092

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\GLCBCA9.tmp

          Filesize

          161KB

          MD5

          315f8d68ff1a414806e7344ac8dd8b6d

          SHA1

          8fe6719bdf12244e8ef154e36c77ec487dbafeff

          SHA256

          90b9dfcb65f6e6cd0123f44cbf8310659f4c7ca4488a57d3045f72d55a9771e9

          SHA512

          95a5efdaf8f620f85838be6eb59768a421059595c1e07dd6680aac3bfd371075f1c9528cb2dceefb333c72ed6821a6e592ca7d16e2923f39212a0e1ffdba296a

        • C:\Users\Admin\AppData\Local\Temp\GLKBCC9.tmp

          Filesize

          33KB

          MD5

          a6601202dda81c941e14dd79878ca61d

          SHA1

          a436aa8bd1d6b501d30f01c4587fb32d513038f4

          SHA256

          7906a8f868986edda9f7c4df0d93ed862959b81344a475f452b9e31c1aece464

          SHA512

          c27d32541f21e0a5aa45939855d4cddfec04ec466a1231d419b29cf07157751bf778ef851868181a0392fbe6ddcabf372b7a2d35519b5b3a2bda21ff7192a5b4