Analysis

  • max time kernel
    34s
  • max time network
    38s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/08/2024, 02:44

General

  • Target

    Wabbajack.exe

  • Size

    130.0MB

  • MD5

    bed2c051bffa285eef0d8e001373c432

  • SHA1

    ffbebff4b6082ac27e65a72ded189675033c863d

  • SHA256

    9a912e5dbe284d2652f507d4c23012d5ad3fce405e6d804d26173a28acde16cd

  • SHA512

    44d959707e21c6356936087a497f7868b0e1c6214b4fa5f499c394227434ddff40a7cb25314d31b084226098e92856c789da334165fc3ace9740022c6207d0fa

  • SSDEEP

    1572864:O5u73ltdLcSuIpkH2Ri4l9/rZlGWMLt7a:OQ71ttsIpji4l9/7OLt2

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Wabbajack.exe
    "C:\Users\Admin\AppData\Local\Temp\Wabbajack.exe"
    1⤵
    • Loads dropped DLL
    PID:2864

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\.net\Wabbajack\Nzzukw5nyAk6L1vj9tNEdFLjb_GF68E=\av_libglesv2.dll

          Filesize

          4.2MB

          MD5

          73d2fb4c35d323813a86e3bf5c85c345

          SHA1

          81f751a34e0c25bdea93902a19a94a49ce1495df

          SHA256

          85b3aee47c0e0eaf3a5ea5c75ba8131387a12639b6a0ef280c28531fb77695ae

          SHA512

          e81677cc9b99ff3d54f67000a60489603e01a896f90c4ef0c883b82e2fdb7b90d2899c078958b3f060a20373b99cb6c4deb7f64cc4c7e0ba2a708209f4684ca4

        • C:\Users\Admin\AppData\Local\Temp\.net\Wabbajack\Nzzukw5nyAk6L1vj9tNEdFLjb_GF68E=\libHarfBuzzSharp.dll

          Filesize

          1.5MB

          MD5

          f121a2afb03f1b8ca1784e544464a346

          SHA1

          9346297a66989dbe88bc459ee8bf936e7acb3d24

          SHA256

          f13d0dae00a598620a436fd991219a2e0fe6157eac90faa025d4d76845cd996c

          SHA512

          ebbb8c2d7d97521286af0f6b02195890b193e660a28e6b1e5112ed9f1fcc081c66587a7a82c8a9468d1a55d477880487d1b3edf1deb2ea285e17d70fbd56c6f1

        • C:\Users\Admin\AppData\Local\Temp\.net\Wabbajack\Nzzukw5nyAk6L1vj9tNEdFLjb_GF68E=\libSkiaSharp.dll

          Filesize

          9.0MB

          MD5

          6b5e769126b4d38601df662bd08e7163

          SHA1

          c799c7c3b8209468bb4047b4783f691537d717e9

          SHA256

          3268b1b2de384d00ed77431fe8a1f053d2c69eee25d07dcfc352491570d63b52

          SHA512

          168c4a5981aa6513bacaa459bac26a3033315a677547eaa01d901b75e46baef91c6fd63185629a3a218a643fcacfa86ae36b8a5313e11f3bcd311bf4b0c61c6f