Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    05/09/2024, 22:22

General

  • Target

    FatHoster-main/MonowareLoader.exe

  • Size

    987KB

  • MD5

    f4642bf135528fd75207ac94192e5ae6

  • SHA1

    0c146c4e2d8f8f8e932a70ee26ac6933b5277cf3

  • SHA256

    089d36206b00e3bbd07ac0e6e416b628e9ac7dbe9c27a1be4363d483177fdb64

  • SHA512

    402dad31f926bab6a367d52a6c42c75d857785d03f14113e72d4c111d4121380ad25db1ac4a48072606c406aa541d47d4b06ad6bff190e060b3c1d6b163ea137

  • SSDEEP

    24576:f0VIi9Bh6vbek0iZGDwRyml3ys85DQluFckhOkZxIPiPU:MVIqh6vSk9l3ZpYFvZKN

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FatHoster-main\MonowareLoader.exe
    "C:\Users\Admin\AppData\Local\Temp\FatHoster-main\MonowareLoader.exe"
    1⤵
    • Loads dropped DLL
    PID:388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\HxESO.dll

    Filesize

    112KB

    MD5

    2f1a50031dcf5c87d92e8b2491fdcea6

    SHA1

    71e2aaa2d1bb7dbe32a00e1d01d744830ecce08f

    SHA256

    47578a37901c82f66e4dba47acd5c3cab6d09c9911d16f5ad0413275342147ed

    SHA512

    1c66dbe1320c1a84023bdf77686a2a7ab79a3e86ba5a4ea2cda9a37f8a916137d5cfec30b28ceae181355f6f279270465ef63ae90b7e8dcd4c1a8198a7fd36a8

  • memory/388-0-0x000007FEF50B3000-0x000007FEF50B4000-memory.dmp

    Filesize

    4KB

  • memory/388-1-0x0000000000B00000-0x0000000000BFC000-memory.dmp

    Filesize

    1008KB

  • memory/388-6-0x00000000005B0000-0x000000000066E000-memory.dmp

    Filesize

    760KB

  • memory/388-7-0x0000000000190000-0x000000000019C000-memory.dmp

    Filesize

    48KB

  • memory/388-8-0x0000000000670000-0x000000000068A000-memory.dmp

    Filesize

    104KB

  • memory/388-9-0x000007FEF50B0000-0x000007FEF5A9C000-memory.dmp

    Filesize

    9.9MB

  • memory/388-10-0x0000000000180000-0x0000000000190000-memory.dmp

    Filesize

    64KB

  • memory/388-11-0x000007FEF50B0000-0x000007FEF5A9C000-memory.dmp

    Filesize

    9.9MB