a4a812445d1364563e7c1e852f23319514bba1e5ac38e3386bc77acda6f3ec51

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04-11-2024 17:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dist/sdfysdfa.exe
Size

7.6MB
MD5

072e4116922c55a0acb83c6d7dbbb8e6
SHA1

22c700bbddfecd3e0a157fc2182f1f62cb64f96b
SHA256

f6199b227874bd24a02cfdead551441aebb9b6284aace5ffa9665db7b7651c92
SHA512

8d6dce2a006dc4435443f5ca8b91257246b123fce3cbae9d2b3fa3cec8306aafa8314f2918569c2694c8429706a2e56133eeb1c773882b6f3eb0b3300356c3d6
SSDEEP

196608:TQJY0aVhTDfyGR21X5Sp6GemDMPwQaYWhSiMRVA:qY0aVBDfDspfaMPgS1A

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 7 IoCs

pid	Process
2860	sdfysdfa.exe
2860	sdfysdfa.exe
2860	sdfysdfa.exe
2860	sdfysdfa.exe
2860	sdfysdfa.exe
2860	sdfysdfa.exe
2860	sdfysdfa.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2548 wrote to memory of 2860	2548	sdfysdfa.exe	31
PID 2548 wrote to memory of 2860	2548	sdfysdfa.exe	31
PID 2548 wrote to memory of 2860	2548	sdfysdfa.exe	31

C:\Users\Admin\AppData\Local\Temp\dist\sdfysdfa.exe
"C:\Users\Admin\AppData\Local\Temp\dist\sdfysdfa.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2548
- C:\Users\Admin\AppData\Local\Temp\dist\sdfysdfa.exe
  "C:\Users\Admin\AppData\Local\Temp\dist\sdfysdfa.exe"
  2⤵
  - Loads dropped DLL
  PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI25482\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
9d8413744097196f92327f632a85acee

SHA1
dfc07f5e5a0634dd1f15fdc9ff9731748fbff919

SHA256
6878d8168d5cc159efe58f14e5ba10310d99b53ab8495521e54c966994dac50b

SHA512
a8f6e9ee1c5d65f68b8b20d406d3e666c186e15cb3b92575257b5637fe7dd5ac7d75e9ad51c839ba4490512f68f6b48822fc9edd316dd7625d3627d3b975fb2a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI25482\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
361c6bcfcea263749419b0fbed7a0ce8

SHA1
03db13108ce9d5fc01cecf3199619ffbccbd855a

SHA256
b74aefd6fa638be3f415165c8109121a2093597421101abc312ee7ffa1130278

SHA512
aa8b585000cc65f9841b938e4523d91d8f6db650e0b4bb11efd740c27309bf81cdb77f05d0beda2489bf26f4fbc6d02c93ce3b64946502e2c044eea89696cc76

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI25482\api-ms-win-core-localization-l1-2-0.dll

Filesize
21KB

MD5
b402ed77d6f31d825bda175dbc0c4f92

SHA1
1f2a4b8753b3aae225feac5487cc0011b73c0eb7

SHA256
6ed17fb3ca5156b39fbc1ef7d1eefa95e739857607de4cd8d41cecfcd1350705

SHA512
ec04013139f3fd9dbf22b92121d82b2eb97e136f8619790cde2d0b660280e838962f9006d3e4c3a359627b017f2b6ade7edff3bbc26e559c3de37540585602d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI25482\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
19KB

MD5
3d872be898581f00d0310d7ab9abaf2b

SHA1
420e0ab98bb748723130de414f0ffed117ef3f7e

SHA256
4de821884cbef4182b29d8c33cfe13e43e130ad58ee1281679e8d40a2edcb8ea

SHA512
35cfb9888a5f4299403a0d9c57f0ba79e3625431a9acc5e04ae2ae101b3dc521a0dcff5d4a1bf508b25dbf05dd432f6987d860ff494d15538ed95673a8b7376b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI25482\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
6c180c8de3ecf27de7a5812ff055737e

SHA1
3aad20b71bb374bb2c5f7431a1b75b60956a01fd

SHA256
630466fd77ac7009c947a8370a0d0c20652169824c54ddcb8c05e8df45e23197

SHA512
e4aa79eb2b6b3be9b545e8cb8b43cd6052036dc5cce7077be40441b9942931b30d76c475d550a178d4e94c9c366cabc852f500e482b7fdcd361fc2a08e41c00e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI25482\python311.dll

Filesize
5.5MB

MD5
e2bd5ae53427f193b42d64b8e9bf1943

SHA1
7c317aad8e2b24c08d3b8b3fba16dd537411727f

SHA256
c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

SHA512
ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI25482\ucrtbase.dll

Filesize
1021KB

MD5
4e326feeb3ebf1e3eb21eeb224345727

SHA1
f156a272dbc6695cc170b6091ef8cd41db7ba040

SHA256
3c60056371f82e4744185b6f2fa0c69042b1e78804685944132974dd13f3b6d9

SHA512
be9420a85c82eeee685e18913a7ff152fcead72a90ddcc2bcc8ab53a4a1743ae98f49354023c0a32b3a1d919bda64b5d455f6c3a49d4842bbba4aa37c1d05d67

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads