Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 02:09

General

  • Target

    d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe

  • Size

    72KB

  • MD5

    3b83673ccb147a13cbe044e58079bb4c

  • SHA1

    fed894e53a2bd83c01ab35ac4bf2982ae7b90653

  • SHA256

    d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba

  • SHA512

    e1b3686814f6676406ce600872f16971311db95266d73c409c3fe4d7e668d612f48888574a34c50622778868af422469f81c0583df868e46c5605829b5f632e4

  • SSDEEP

    768:hZZ6Zyf9DevU3u+VNDkC0H9ALW/Z0dPWyYzTnLlNey1GJrDKkHMKejknCMBuQDXe:1m8XDkBdUWcnYvnLl7PkHMFGu4XtBni

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe
    "C:\Users\Admin\AppData\Local\Temp\d5991aeed970446ffc4dea7d2248c6d2133b35cca0991caa1b1e939b1da608ba.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:1984
    • C:\Windows\SysWOW64\ofhoacup-ufoot.exe
      "C:\Windows\SysWOW64\ofhoacup-ufoot.exe"
      2⤵
      • Executes dropped EXE
      PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\ofhoacup-ufoot.exe

    Filesize

    69KB

    MD5

    8ccc80902ed1523f619c22de228dff6f

    SHA1

    2d0fb8b2bafae5fdd725bec61431a84d27dba177

    SHA256

    0701000bca9e2638ac2a1d21079a1dd012d499e7874e991fe9eb91f9567dcaa3

    SHA512

    aca5ba557d7230c8f9e226541188cf9b1f8b534eecb5e09c10c7b0fff598f595baff6ef82c811aa2e04aec4ea99153228adc408c6bea6e10b5131bde4eba5b86

  • memory/1984-5-0x0000000000400000-0x0000000000403000-memory.dmp

    Filesize

    12KB