Analysis
-
max time kernel
10s -
max time network
12s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-11-2024 04:40
General
-
Target
LoneC2.exe
-
Size
21.7MB
-
MD5
b7e4446603e5abb6afd10c7d2022c22c
-
SHA1
c93180a43976b110fc9950906bdc6bf0f5f500b4
-
SHA256
a63df4d35d16c01a5c005c1caa47920866385afd89117e4c61264754d56466e0
-
SHA512
bfb20f46b728b8c6839a8925a17f49684ac82699eccfe68977e77a932f7d889b7163bf518de7e5732797c51a0014bc0cc2aa5a6032151228781f75acba6fb6fe
-
SSDEEP
393216:NK+EAlnULFDlu+Qmqb1FqyQgsgT4XGQhIW82N8u1Ldv5:b3lGFD8+QmqbCFgSIW82awx
Malware Config
Signatures
-
Loads dropped DLL 38 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LoneC2.exe"C:\Users\Admin\AppData\Local\Temp\LoneC2.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\LoneC2.exe"C:\Users\Admin\AppData\Local\Temp\LoneC2.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD50f57f76ebe9f13260f339ca74e376057
SHA1e28c4fcf1c80ac455c4e695df4782071d9c311a8
SHA256def1adabea931cc5ed7edcd1532fa866548e52774932d96b94f78796723d9af6
SHA5120fba9552a6034ae4be93bfffda0866155e5eb1f07c108088678e9d204ea35875a0ebd4ff0f245719fd210691ea0a1b5e9330006b7bf660242665e575c86267bd
-
Filesize
10KB
MD58940d1df4c887ec25ad3c1fe03681a9a
SHA13929131808b4643706b33d7b3707155b3d3bcaa2
SHA2563ee24254f2bb4300067c479b775b6e1108d2433cc8c00960086e93ca1de79291
SHA51241fd30e7d24bac8572b7af25e5ce933d4a35275b6f783839f8e2ec715f57e9303909c55434223fae9db100b5cbf226eb489affc3c2238da31c6394b129ce909a
-
Filesize
10KB
MD50eba06c897f57d909f9cd867c06d28f9
SHA124e00bb62fd677ab76c99853e7e0f4998595e930
SHA256721997f65f27a8a0cff970178d88ecbbaf997c8db9304f4f655134cf0e17cec4
SHA512a7ebb5876e87e91715685276cb25a9f79723d353daa7ed0eede6776abe377c4b7ececabe095e0a6075256ae580292bc16470674e52a1939139e0e0694df83e1c
-
Filesize
11KB
MD587ba1594960744d6edeca8de42912e46
SHA17f8d25a6775553189920097e446d73f3b3ea9748
SHA2567a9ac33cd0f5fb42343cc68f69dfa6fd9d44350677ccba048e9d49d1d9e2a92c
SHA512d684502de8ade252d8696f252b784970b37834e23c65800774b90706b2618c349b05a068f05ce4ddbbe8e930e9c914c7d586c958131baf6f561bb641f520b9c9
-
Filesize
9KB
MD52e3990997255da5057ec0ffd6c5e7df4
SHA1e71d37d8f587f2dc4d52ec4969d26608ee68ce4d
SHA2568e70faec819e78f648474f7ad2c61f4164b3bac99cf69598c8484f078785176e
SHA5121d122622aa7cea0bf3cdf0993d4ef5313e1d423e90688e385754b2d42a2f043d61fd342c2441496bf28787cf415f13238fde9d141fc8b9484a425e3733a58de8
-
Filesize
10KB
MD5490c3f892dab35eb0117bcf3888f3064
SHA19755a0a36e334de0231b7a0cbbb36cb70fd414a1
SHA2560212446005f442f34cdb85b37d2fcbb6ea8317d071292be6e4208e83d133a006
SHA512c86af5a5573c451f9def203209bea7c120b83bae94955607f927d695138d7c875004abbea02f74dbb53bc28b7ae73c3d9d4a99df84cb550ecc1abb6a63168f89
-
Filesize
11KB
MD57ae107aaeccf9469fd98edf913b29a77
SHA1b7118191e5f47569186439f579ff4f49a45c9cf0
SHA25647ffd7e5ca70b7f6d6fd72ab7a8e8c76a449e9fd640e95fbe7d0816a357e5b47
SHA5124d68564f68dce29ea91b1ec15cb89a88958d61198e6796d9e9759220bf35bab2bef6e3558c35d97426a9b2842e0eb17f50123b3db5ef25b02fa521e99ccd60ea
-
Filesize
12KB
MD595d972db072be41b6f56522a40e2b393
SHA1c27d23c000bfda46020580a42c157cffd0c305f8
SHA25634e26e354a4c19e0112e74513db572b998700bc32c289082deb9e0bf0575a7e9
SHA5129dc6bd1b3081efd9d474d7835e369d7956cd7d8592f44aff96feb355f698ded819cdca50d951be0125c2d6efcde7727d5c075f598c609fdad9efbf333fbf9d76
-
Filesize
13KB
MD5cf39a3c566521194746868e8dd1052bd
SHA1a3db8897037d5a310acadc163d63a3504b88e195
SHA256bc0a810fe744003d11e997573f1031e97ac3c1b0088d3159a53a2af0f6be6493
SHA5122eebe4c559e9fa2e44b3935b292582cc8c6b57cb165e56863de4f2b0a475b51ad408bcd8516ed892119565102b28b4b15376b3e4d3b0cf0dfc5d470696de3cc5
-
Filesize
14KB
MD5bc537cd9d0f776bbfd9c77b0890fd59b
SHA195d44844f4767463c085a4c1fd048d923b9a7fd5
SHA25676f3f2437a1588e781d9cd2f1da95920c8026de6db4dba53d110f660d43fb900
SHA5120f677d5169a9fbac33a43cdfad2e4436746cd6e4b05b7e964539dcc29a56cd4e3a327ebc4e46fdedec0ace8c8ec94234a9677dbf20ddb51e0250570ec36bde61
-
Filesize
10KB
MD54a8f45db3c423105043bbc53c5961332
SHA12fc1aad7780e8f073b50a435f97a89486014b108
SHA25681a106a0d31f188aa11ae9e55d8f6e97529572dbf0b0791acdf621959afa1267
SHA5129c9ba869551fbc13cf91392251428e62dc09fa30d1ac830cdafbb682d3149d28b95cc44d085f1d75944b1a39e9db4bef0e7017f3d01d6a6ef5fe45a80623fbeb
-
Filesize
9KB
MD5e1e4fc46e038acbda69fdb51b45afa81
SHA12738be06b26a6d0e37bbcfcc7e166b35d6be9351
SHA256686addf3a7ee3007c1bb31b6664f8869e609a5a1c99b65562d6bf93310970a60
SHA512211e215417edaedb460fb21e3f78ccb16d1f90311a4e54218dd52463d2985c799759304fd43b3435e71b9923b2aaa0623695b04433b89b1a3c5e03ec1d8f1c24
-
Filesize
106KB
MD5870fea4e961e2fbd00110d3783e529be
SHA1a948e65c6f73d7da4ffde4e8533c098a00cc7311
SHA25676fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
SHA5120b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88
-
Filesize
46KB
MD5d584d4cfc04f616d406ec196997e706c
SHA1b7fe2283e5b882823ee0ffcf92c4dd05f195dc4c
SHA256e1ea9bb42b4184bf3ec29cbe10a6d6370a213d7a40aa6d849129b0d8ec50fda4
SHA512ccf7cfbf4584401bab8c8e7d221308ca438779849a2eea074758be7d7afe9b73880e80f8f0b15e4dc2e8ae1142d389fee386dc58b603853760b0e7713a3d0b9d
-
Filesize
71KB
MD547587fe5b906ad04e6d2174bfad2a75e
SHA12d6ababb8cf2c1620291830366156d39966c0ffc
SHA2568ee0ec7bbabe341dbcf3d7849997c655ed3adad72f6c464eb1010b3b97effe1e
SHA5127651b77e127a4057e86bc539fd5066d2702c9d1b7047b7acf1a01c9c865002279c14f62b24c9e90eb5a69f3d49381804cf13facac62fc5aa79de882bc5bcdd24
-
Filesize
56KB
MD5f0077496f3bb6ea93da1d7b5ea1511c2
SHA1a901ad6e13c1568d023c0dcb2b7d995c68ed2f6a
SHA2560269ae71e9a7b006aab0802e72987fc308a6f94921d1c9b83c52c636e45035a0
SHA5124f188746a77ad1c92cefa615278d321912c325a800aa67abb006821a6bdffc145c204c9da6b11474f44faf23376ff7391b94f4a51e6949a1d2576d79db7f27ef
-
Filesize
33KB
MD50d8ffe48eb5657e5ac6725c7be1d9aa3
SHA1a39a3dc76f3c7a4b8645bb6c1dc34e50d7e9a287
SHA2565ad4b3a6287b9d139063383e2bfdc46f51f6f3aaca015b59f9ed58f707fa2a44
SHA512c26c277196395291a4a42e710af3560e168535e59b708b04343b4a0a926277a93e16fe24673903469b7c96545d6fbf036f149ef21231a759a13147d533d4fc3b
-
Filesize
84KB
MD5213a986429a24c61eca7efed8611b28a
SHA1348f47528a4e8d0a54eb60110db78a6b1543795e
SHA256457114386ce08d81cb7ac988b1ff60d2fdffc40b3de6d023034b203582d32f5d
SHA5121e43c2cacc819a2e578437d1329fa1f772fe614167d3ec9b5612b44f216175500e56e3d60a7107b66a5b3121e9e2e49344ebe9ff1b752cae574bb8b60eec42ed
-
Filesize
24KB
MD5391bf7a40de25751364d52b881bf30e9
SHA19ec6ae2df4280213af96b764370957092e476b22
SHA256ab3c6af282b8bef50c96be53cb74fcaf72befff9ac80bf30950975dea0244826
SHA51275c3d4f8ece49b42bc70c462da4c4a363704bfc915d11e696f077cc021f07c534fb8635ef480d762f4a6a4457c22f6d4fb89414de5ee77c22f12342f0f24b841
-
Filesize
41KB
MD502adf34fc4cf0cbb7da84948c6e0a6ce
SHA14d5d1adaf743b6bd324642e28d78331059e3342b
SHA256e92b5042b4a1ca76b84d3070e4adddf100ba5a56cf8e7fcd4dd1483830d786a5
SHA512da133fc0f9fefed3b483ba782948fcdc508c50ffc141e5e1e29a7ec2628622cdd606c0b0a949098b48ee3f54cdb604842e3ca268c27bc23f169fced3d2fbd0a5
-
Filesize
60KB
MD51af0fbf618468685c9a9541be14b3d24
SHA127e8c76192555a912e402635765df2556c1c2b88
SHA256a46968ca76d6b17f63672a760f33664c3ea27d9356295122069e23d1c90f296a
SHA5127382a0d3ec2ce560efd2ddd43db8423637af341ce6889d335165b7876b15d08f4de0f228f959dcb90b47814f9f4e0edd02d38a78ddad152ed7bc86791d46bc36
-
Filesize
812KB
MD5fbd6be906ac7cd45f1d98f5cb05f8275
SHA15d563877a549f493da805b4d049641604a6a0408
SHA256ae35709e6b8538827e3999e61a0345680c5167962296ac7bef62d6b813227fb0
SHA5121547b02875f3e547c4f5e15c964719c93d7088c7f4fd044f6561bebd29658a54ef044211f9d5cfb4570ca49ed0f17b08011d27fe85914e8c3ea12024c8071e8a
-
Filesize
9KB
MD54391a26e3e1ddf53f6ee40f062461bb5
SHA16cacd337e1d23f91d560236cd66474e9cfa5ddd6
SHA2566b1ba964ba5fe9626eaaf1419fe9546ba6523ed4b47ce782eb6e686b1bb51050
SHA512002bf656fa6a553bfdd1ab080fc8d505578e8a541b550b95e7f00e9de3d579f51002548678ccfeecce2bf098bf1e9ed65e1bc6dae22409eeea0bf13d49d72b05
-
Filesize
39KB
MD554350e03c3633c8808a5a1c000244807
SHA1fe9d5cd75cbcbe0eab13f40ca6b85478fb8f04ba
SHA25682abcdd903c3669afcea34f48f989715e6e84d282f5fd66b08e28405fa261a6e
SHA512f6367d97056faa3eab04f6bcafcfc0a24f6a6ea1b127bc99c014114d53b152c3a40d28856f2c8144f589e4996e138fe55aa13c97c6affaf9a3bdd32563cb48c9
-
Filesize
1.1MB
MD59c2ffedb0ae90b3985e5cdbedd3363e9
SHA1a475fbe289a716e1fbe2eab97f76dbba1da322a9
SHA2567c9418ad6fb6d15acb7d340b7a6533f76337ad302a18e2b4e08d4ee37689913a
SHA51270d2635d42e24c7426cf5306ed010808f2222049915adb43ffc12c13259c8e7a9fee3a49e096d5ba2b6b733fef18574823d00df2e8d7fb1532e1d65d0c478008
-
Filesize
23KB
MD58e1d2a11b94e84eaa382d6a680d93f17
SHA107750d78022d387292525a7d8385687229795cf1
SHA256090a90cd17b74abefddf9f82d145effe5c676e7c62cf1a59834528f512d7ee82
SHA512213bf92a707b14211941e5e071f1926be4b5795babc6df0d168b623ecd6cb7c7e0ae4320369c51d75c75b38ec282b5bf77f15eb94018ae74c8fd14f328b45a4e
-
Filesize
203KB
MD587bb1a8526b475445b2d7fd298c57587
SHA1aaad18ea92b132ca74942fd5a9f4c901d02d9b09
SHA256c35a97d8f24ea84d1e39a8621b6b3027c9ac24885bdd37386c9fcaad1858419d
SHA512956bd8e9f35c917cbfb570fc633bb2df0d1c2686731fa7179f5e7cd8789e665dd6ff8443e712eafa4e3f8d8661f933cb5675aeb1a2efc195c3bb32211e6d2506
-
Filesize
63KB
MD5c17b7a4b853827f538576f4c3521c653
SHA16115047d02fbbad4ff32afb4ebd439f5d529485a
SHA256d21e60f3dfbf2bab0cc8a06656721fa3347f026df10297674fc635ebf9559a68
SHA5128e08e702d69df6840781d174c4565e14a28022b40f650fda88d60172be2d4ffd96a3e9426d20718c54072ca0da27e0455cc0394c098b75e062a27559234a3df7
-
Filesize
1.4MB
MD5196deb9a74e6e9e242f04008ea80f7d3
SHA1a54373ebad306f3e6f585bcdf1544fbdcf9c0386
SHA25620b004bfe69166c4961fee93163e795746df39fb31dc67399c0fde57f551eb75
SHA5128c226d3ef21f3ddeee14a098c60ef030fa78590e9505d015ce63ea5e5bbcea2e105ff818e94653df1bddc9ba6ed3b376a1dff5c19266b623fa22cd75ac263b68
-
Filesize
24KB
MD516be2c5990fe8df5a6d98b0ba173084d
SHA1572cb2107ff287928501dc8f5ae4a748e911d82d
SHA25665de0eb0f1aa5830a99d46a1b2260aaa0608ed28e33a4b0ffe43fd891f426f76
SHA512afa991c407548da16150ad6792a5233688cc042585538d510ac99c2cb1a6ee2144f31aa639065da4c2670f54f947947860a90ec1bde7c2afaa250e758b956dbf
-
Filesize
992KB
MD50e0bac3d1dcc1833eae4e3e4cf83c4ef
SHA14189f4459c54e69c6d3155a82524bda7549a75a6
SHA2568a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae
SHA512a45946e3971816f66dd7ea3788aacc384a9e95011500b458212dc104741315b85659e0d56a41570731d338bdf182141c093d3ced222c007038583ceb808e26fd
-
Filesize
287KB
MD5d296d76daf56777da51fec9506d07c6a
SHA1c012b7d74e68b126a5c20ac4f8408cebacbbf98d
SHA25605201ceb3dba9395f6ac15a069d94720b9c2b5c6199447105e9bc29d7994c838
SHA51215eed0ab1989e01b57e10f886a69a0cca2fff0a37cc886f4e3bc5c08684536cb61ff2551d75c62137c97aa455d6f2b99aab7ae339ea98870bb4116f63508deb1
-
Filesize
100KB
-
Filesize
144KB
-
Filesize
3.5MB
-
Filesize
48KB
-
Filesize
72KB
-
Filesize
52KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
52KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
220KB
-
Filesize
180KB
-
Filesize
152KB
-
Filesize
100KB
-
Filesize
3.5MB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
44KB
-
Filesize
60KB
-
Filesize
52KB
-
Filesize
736KB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
44KB
-
Filesize
52KB
-
Filesize
1.1MB
-
Filesize
184KB
-
Filesize
144KB
-
Filesize
100KB
-
Filesize
180KB
-
Filesize
100KB
-
Filesize
4.4MB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
1.1MB
-
Filesize
80KB
-
Filesize
60KB
-
Filesize
144KB
-
Filesize
152KB
-
Filesize
220KB
-
Filesize
44KB
-
Filesize
52KB
-
Filesize
736KB
-
Filesize
3.5MB