Overview

overview

8

Static

static

3

GoonScript.exe

windows7-x64

7

GoonScript.exe

windows10-2004-x64

8

Resubmissions

11/11/2024, 23:21

241111-3b2edayjds8

05/10/2024, 21:20

241005-z67cbstakj8

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/11/2024, 23:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    GoonScript.exe
  • Size 23.9MB
  • Sample241111-3b2edayjds
  • SHA256 3aa4e4e742a415037651725683b64b4a15a229cbc01dbec398e6e28763e59955
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GoonScript.exe
    "C:\Users\Admin\AppData\Local\Temp\GoonScript.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Users\Admin\AppData\Local\Temp\GoonScript.exe
      "C:\Users\Admin\AppData\Local\Temp\GoonScript.exe"
      2⤵
      • Loads dropped DLL
      PID:2584

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22882\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 82dde028373c0b261c50da7a4881c4673ae7efb5fa01ba6c79c04978766ed73e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22882\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 ae2efd2c5ff4e77d176037f987b92137f032d2100f16e574ab508ff95dd4ea43
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22882\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 0d292fd1d9ef29553155c00189f05a0dc9d12abda193d9fdadbda654b0026c3f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22882\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 76ea8042cc384cc287aba770778067f2f32d75b43f3a5f32ec3fcc895433e6a5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22882\python310.dll
        • Size 4.3MB
        • SHA256 058925e4bbfcb460a3c00ec824b8390583baef0c780a7c7ff01d43d9eec45f20
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22882\ucrtbase.dll
        • Size 1.1MB
        • SHA256 fd579c729469a4a7ae27fc1df0f5dfdc403232650d50e59226964b10c4eb4486
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path \Users\Admin\AppData\Local\Temp\_MEI22882\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 2ec2c7715cfae112f6b0be88a1d6ecc205af59068e28a2a08ecba2210bd8c7a5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download