Analysis
-
max time kernel
135s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20250211-en -
resource tags
-
submitted
11-02-2025 18:19
General
-
Target
dependices.exe
-
Size
21.8MB
-
MD5
4f2b504074589822459f7f16fa34ff46
-
SHA1
17c947f8f92ae66b2199adf2f2c889107fc663d0
-
SHA256
73aa62687ed02328cd8720abcf044b4ea77ddd98b004b5b009db15d00dbcc08a
-
SHA512
b5e941f5e91587661e6981e5c858a885f127f88a7f6e26faf48110642e648c4fda758e17b13c1f3b789e5433a50c51283faeaaa5f43606cdc6cb76eb9d27c5d1
-
SSDEEP
393216:GqqPbs3CXIQscNurEUWjV7Ehc1JEnEH4I3Gqm7mZyupH7:qPbzXIQnNdbV7Z1kvZ7mZye7
Malware Config
Signatures
-
Loads dropped DLL 59 IoCs
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Browser Information Discovery 1 TTPs
Enumerate browser information.
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 43 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dependices.exe"C:\Users\Admin\AppData\Local\Temp\dependices.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\dependices.exe"C:\Users\Admin\AppData\Local\Temp\dependices.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Windows\System32\wbem\WMIC.exe csproduct get uuid"3⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\wbem\WMIC.exeC:\Windows\System32\wbem\WMIC.exe csproduct get uuid4⤵
- Suspicious use of AdjustPrivilegeToken
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5a6369f58a5a4207084443d724da1cd1e
SHA1d6f5523262d27465f5099c443f5565b1873b86f2
SHA256862229528d243b2e438fdf5eeed55fb12ffb17d7f42ad59d6993da14b15a43e1
SHA512a726000a899bf1f06c75f49eebc692f3a3c2fcaf7fd8d95fbef784658b30cf131793eb7a92323a000f38412d6c20c2843170e54ab7b922c765e87b9daf4778ce
-
Filesize
116KB
MD5be8dbe2dc77ebe7f88f910c61aec691a
SHA1a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA2564d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
SHA5120da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
-
Filesize
48KB
MD5f8dfa78045620cf8a732e67d1b1eb53d
SHA1ff9a604d8c99405bfdbbf4295825d3fcbc792704
SHA256a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
SHA512ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371
-
Filesize
37KB
MD5dd2c60b9601709ad84dad3c79a705b50
SHA176336a57f3f3d625bb99a5e4a710b7f49c5eea90
SHA256add551e013aab6eb238b3c52f23ae913378d86f2fbfe8d6c753cd0ee20ee39d1
SHA512a1a9f619bf00afd35421397ed47b7f202fed68f2c108cb327cfb94d566e9cf54086fcf103c39a630f736473427bd57618d37dbbe7855bf0bc646d6b499889246
-
Filesize
49KB
MD5cae4313d709c392681acbabe5fbf2991
SHA15c0c6d28dd3fb4f82bea6b735dd33e1f916b220a
SHA25615bbc72e20bd85226346ad3c246f2a06a380c9f9087decf61604480b4ba5288d
SHA5123d0b314763ea4321e76c9bf0ea741404b565763b47b37de608c7757ad6782d0890bf3ce66efcad14db4aea04f8e581b76d4d5a23e6bd69522cb5965a6b0d9d93
-
Filesize
59KB
MD50b7849f82048b85fd4bb3937dfcaf6dc
SHA1ff14b4957e8c9670b20793ddae0645a8d5521576
SHA256c5d4bb67c442d90cd13a0446d8e302578825e20d117b27d4c95347da9cd9203d
SHA512d70bdc8fe114177e2d4005d0646618e9e9a28034ce8e29eaa932c3a446cc2bf6e26d3a553becfe734243b1af93734da608b7da5072093c506124535a70f51b32
-
Filesize
105KB
MD5b340d4b5a9ae1bf689932d3966d1f6bb
SHA1cbc607e6f351408adde3b08c41526e2d7f34a67d
SHA2565f3306004d90ce7cc742a009310dc7717f1e323ee4e84f835b6dff6f38b6e5bc
SHA512a5386fd4f576d251ecacfa956f0dac88b9fbe63b1797241f76e14c86c154f0c9e789a5699ddf26b25a4795b216f4bf7b8d81e2269d89296a457d6ed6135c18cb
-
Filesize
36KB
MD5ca3e15fb4d3fcaaff073e814a53bef68
SHA10cc92064f95d2fe5bf9efef45ca55cf928e0b589
SHA256e7e2ba46d12aa10f23c6d18e97332df05a2d36c39f4b1a440b3b1e8392b21439
SHA5126044a9e8726812b96fe7e35597ccc894b6f54398d6759121b20010e96a40e7c99813671d30da250aa19d3cbe9be18aaad5418937104cb78a460accc0d15177a3
-
Filesize
86KB
MD55224ab69b7b5720825ed5ab450ea7109
SHA1ffbb7cb4320ed1d9b8f89e080da91d313207c8ae
SHA256b281a47c8b13db43d1cec0e69aa0eb54e0cf789ee572465a43cc124847d0a9d5
SHA5120111e72963381207d14a117392463704d52535705fbab0e575b8e77012fdcaadd5f4844274bcfd2111c6f1d7c326f3f25cb022adb5fdd7041b38b33ede2bcab5
-
Filesize
27KB
MD57a9e3f86bbaa661b02814a793e37afb7
SHA170ee30140291ebf24676b2b0ca527a0e316d0e6e
SHA2562e35ddc4e2a7e538089454e2cbdc4961edd5dbd04425a4e493f2b639267f4341
SHA5120e6c5b574e8abdd17274421eb2e57936f7aac9716284cfe98bb91087a59854dacb738fb51fc2b54ff7bd0388c3df6c3d448772447d12a26e3172ffbe0037c4c5
-
Filesize
34KB
MD58d24d110a5be802de038761a43a8ea7a
SHA12d8db5e6476144b473c0681bf9f3e90d20bbac81
SHA25659c81620deaec06a56447d188244e71ae631ae0a3408f6cf6f2006556668c36f
SHA5123e7c6e9172265056784e9638a8dcbe05eb33114c4db907f185e0c33ac8f0a733daf87d77532fd326060d1046734a5193b616513e164f8e632999129adce62593
-
Filesize
26KB
MD5aaa2a0cf06ae037df1fbdc7738dbb40b
SHA161ea6b14ab201e623462f72e3b991d3264bad39c
SHA256ed8ce7b771596953d068101238cf66de460442c28db91feea5a7bf5d52ce2612
SHA5128c8613c26ddea6ccb4b953c793219316ff44545c03e8154b782c231d5fc37e6e3a8d5c6131adb22bff403a4a30f8a4831e32a71cd8e89bba45dbe9b6d8e31f4d
-
Filesize
44KB
MD56854e080e0d4d9b1d09aa742da974d89
SHA19823144af260163224126add4ba1304f882163c8
SHA25606b34715b630ba8087b0d2e866774dd1623c5b878186dd19f8e958c70236fb39
SHA512d24bcedba0f02fd24a4e339b8aa37dc77aaf923e21939170d932141ea2e7739f7a71360806be9ee247892c8170636ac095c623a3fd4cb2a49271803ac17ca127
-
Filesize
58KB
MD55a25a967a18f3c61bb04838ebcde84b6
SHA18b1863a3bd4465196f79f11f4eeb427554d7f170
SHA256a67ba940bf981c4692e45e5e5689d3ca4d933841cd526f5cf7039e40b24e2c2f
SHA512053fd28028ada69444b3b10efa56a850f2749734046c61c0c5b35383d8dd6c03d65a3cfcfa0d58408acdc4c46d86f9b7b38ff45798e21913cab5c11af10bf795
-
Filesize
65KB
MD56885e52c3ead7b2952684096792e958c
SHA1cc127de581ef54e0542dec8a58150c6c087b8c0b
SHA2567ee872d659cdb44e8b2ac4425dfb8430f8166a82b60f6a8fbcb3fe9006cfeb4a
SHA5129ce25e430a56a8e973e3f8dba9156790651cfa1d9c958439ff435b96badfeae46a15a2df53c0d12759c03ceb8ecacfc0ad102d44da37383a0433ea9a5049a37e
-
Filesize
24KB
MD57a00ff38d376abaaa1394a4080a6305b
SHA1d43a9e3aa3114e7fc85c851c9791e839b3a0ee13
SHA256720e9b68c41c8d9157865e4dd243fb1731f627f3af29c43250804a5995a82016
SHA512ce39452df539eeeff390f260c062a0c902557fda25a7be9a58274675b82b30bddb7737b242e525f7d501db286f4873b901d94e1cd09aa8864f052594f4b34789
-
Filesize
28KB
MD56da023c8ff0d0c78d2f04978f71fb087
SHA109f984d8090946179642ccb3eeb7a5cd061fe523
SHA256d4584f2558d90e831ab2d04f20e3475c61ba757a77adc4b57d9a62f622e1eed6
SHA512b7dadd5364aeefa72da046d20104d6aadea5d84ec9b62a166932abd93aaf2b0efa0c2a1ca3e6042c7805ec9e2f563964c47d85cfff7221461cfe63fc9fdd150c
-
Filesize
1.3MB
MD5630153ac2b37b16b8c5b0dbb69a3b9d6
SHA1f901cd701fe081489b45d18157b4a15c83943d9d
SHA256ec4e6b8e9f6f1f4b525af72d3a6827807c7a81978cb03db5767028ebea283be2
SHA5127e3a434c8df80d32e66036d831cbd6661641c0898bd0838a07038b460261bf25b72a626def06d0faa692caf64412ca699b1fa7a848fe9d969756e097cba39e41
-
Filesize
9KB
MD51ae1680f2805602716e0042928b90d0d
SHA1c90831952d1d4d3abb91d30e1f2a6fd8ccb56d2c
SHA2563bb4353ab913b7056126d43dca3f8503d234a51cd28693d03c1dc68d6f827be5
SHA512e0b9597e3611f5db6ed102bc622a5a3166e7e82093a77f5deff29a8421ee1d8ebe71da87fdfb51dc4892f12157302234633eb291d88dd0345ec457f2560b2148
-
Filesize
39KB
MD526ceae3e90ad725574c5d673fc0ef2ad
SHA17cb1c034454724039d2060056fb4e9b6d7be6097
SHA256d259006d6fa9f7045d1b6588bd56a6794a05bbbe784c542075e6f169de2fd6a4
SHA512760a8e84e050415259d5c15ca4c2092a723f5a9fae1b03aab05fbfe5b12746462ef4c7619dc5e713eb899763a67136586e98c53b01e5d895fabb2a4b26d94f65
-
Filesize
1.6MB
MD59427b0b256b0ec55ba23329198c83cf5
SHA1a7b284c0b53f099999075061ccca7fad49e00c94
SHA2569a88011fa58ad83337e86d7384c6b89d0bac9f7f6c9646cf93e186910fd98953
SHA512c33965b1be06c27f8cb3136d9b722c1223cbdef9ac7e6413625b701aea7e79e415d0bed6d555a6d80dc8d4122e5cd26516f8ce8f7930aa4ffe18be4176ec4841
-
Filesize
29KB
MD5f8476506dd60ede903f74ee8dac879a1
SHA182296da7d459063adf6e2edcb564869ed9a0d356
SHA2564fbbdf4a46caadf4411062df095cff50fcc94e5072304c1f493740fd59491313
SHA5124ef0522ce4fbceeb8403f017390154ffbfe69991717f2d897d24e1716224bc486918f9df8fc63d44c8e8854c8eb7d93c0329cb975425ca5b1deb1b82056add82
-
Filesize
222KB
MD5f09b056d6ba41b8fe3a98c5031981ffd
SHA1af05d656bc6458dba3eac042af2a8cc35a36d734
SHA2560c70bf71a3ef2a428c521a85374b9e842085a6cc737bfbab544e314f20fb9770
SHA512309c896e8d7ed27cb2656f1ee5b119fbca2253433e8aefaa28ed40acdd8a05dfd59e81693634f0739b138303dad2b8fac913522041dea8f5b793a2ce624f80c2
-
Filesize
34KB
MD5785ebe1a8d75fd86e6f916c509e5cf50
SHA1576b9575c06056f2374f865cafecbc5b68fa29c8
SHA256e4e8cbd99258b0b2b667fe9087a3b993861ee8ba64785320f8f9abfa97a8d455
SHA5123665d9b97e5ab674fe8b2edd47212521ea70197e599ce9c136013b2a08a707c478b776642293a0457bf787b4067ba36ed5699ab17c13a2e26e7061e8f3813c3a
-
Filesize
87KB
MD5ae4bbb66dcfd8c5d9b85a03940b580c6
SHA10736bb88dfc7d07b77215764b58895f689d5c2b8
SHA256bef24af7469a46ecc89d9b114cf22cdc755db1d342bc79a85045bd2ae5310982
SHA512a32f55b4595a6742813c47cd15fa7df5f942260ecae5f46f13f18bf1dfb42f0a86e16b25fb94ae38bd644bfd44b0b240bd0b7bb5ec4545fe57bea01616284be3
-
Filesize
66KB
MD56271a2fe61978ca93e60588b6b63deb2
SHA1be26455750789083865fe91e2b7a1ba1b457efb8
SHA256a59487ea2c8723277f4579067248836b216a801c2152efb19afee4ac9785d6fb
SHA5128c32bcb500a94ff47f5ef476ae65d3b677938ebee26e80350f28604aaee20b044a5d55442e94a11ccd9962f34d22610b932ac9d328197cf4d2ffbc7df640efba
-
Filesize
1.8MB
MD548c97e14c07441c4ea4f05ce968980bf
SHA199493314d837df989092931379a67a435762db20
SHA2562112128e60119e82f1bb95ceaf336a56c6d6f9d41bc5240b66a0e47e9ad1fbc0
SHA512b5f01d76a1a0e822fafed61d363f976618c4b0f83fe08874b4cf733b5b9df67b06f55dcae406c2ac221dc0609abac4ea9e67c1ac6480c994809a3aaff0cc5116
-
Filesize
193KB
MD59287ceddac33fb0535782211f1b07dd8
SHA139c02971931aed01f55047cb32212f8debcff9d6
SHA2569d90dec4467b85c2f8bbc4518cb3db466ad7a67383a9b0bb530aa3a5195aee7d
SHA512c75e179983e04e57446e5a13ad80310c9fa51c2bdcaa0b63e39356fb4fc336529b1c9117c50166ba9f72b7171fe26f620a98d56ec779c71f7653a544dac6900f
-
Filesize
62KB
MD56c98c4fab37e232301b942de67519dd0
SHA1540b63161de93c800cf7c7106cb720ad60f7cc2b
SHA25626c937bf094ba8b13b70f03d4ca4494257411efffa67f3d14dcfdc42fcd9e504
SHA51240097c6d2f38d908ac25de940ccfc5013bb56e4947335a4f1374baf8faca832ed568aa1674720d981318b0e9226cb4af9df0b7f6489e0d8f197c2cf583978ec7
-
Filesize
25KB
MD5a79abdf8add4f0808192c2d98a473aef
SHA12b63b9ff9a911140d9fa30f80bb65e7fae3a3774
SHA256977c92748976b45b6197b1e43bd92ea78948c48261788e4748df0e76dc149c1c
SHA5123d3172d9552d2b9b53892684b15a494edf781dff8cab71ed601ecddb68a4d622f605f7be7a1791590fc5d4a1b1e9e28f2ac5e924dd74e0985a8a2223e5c76d4a
-
Filesize
630KB
MD56f1a6db6a995003bf81ca3da746dadea
SHA11f95938bcd13959afcc45d0cc19f1216a00f9ef3
SHA25634a7eb01417d7934fb32c014376b1346cfd137ae55e5f1b15cce070f0d23ece9
SHA512c0cf3c3bafad3822c2f2602927747c9b6d428747727b4864e794f8c0e08ad73bfec7fe75303e4aaab8998778d8043881760325b3102467f470a4fcda61048939
-
Filesize
295KB
MD5c8bc803aa99be067d83e694a375dfbd1
SHA1c6d772f7f03900a2626896a248b0d3a077227f41
SHA2564849d1f3a2a27dafd18bef2d60d5e62ed416e994c2a59576a7e3ae233ffe2d70
SHA5122ad0f2c930697cf51d4860552b23f40d783b5eb6fd23f60a44db13891534b1cf4eef3e56faf37ea758ed24c55c669fab6445384eb6fdd7b298b9c938764cdaa7
-
Filesize
48KB
MD556d50216d889b330abb00b82734586b7
SHA161485951049cc2a1df1423a53a63eae44f0c8f4e
SHA25645cc3c1380af804a5950110f6d11ce30d399c22949e0f5547870c3f3b1170617
SHA512f7d28ebb4dd8c644f189ca47bf2c3cc296e56f1896d295ba7ed20c689cd077fc6eaad2fe6e477f451c7bcfab5cc6e4cc2db29626228cc133aa87c1b93373154d
-
Filesize
160KB
MD5f310cf1ff562ae14449e0167a3e1fe46
SHA185c58afa9049467031c6c2b17f5c12ca73bb2788
SHA256e187946249cd390a3c1cf5d4e3b0d8f554f9acdc416bf4e7111fff217bb08855
SHA5121196371de08c964268c44103ccaed530bda6a145df98e0f480d8ee5ad58cb6fb33ca4c9195a52181fe864726dcf52e6a7a466d693af0cda43400a3a7ef125fad
-
Filesize
124KB
MD59618e15b04a4ddb39ed6c496575f6f95
SHA11c28f8750e5555776b3c80b187c5d15a443a7412
SHA256a4cd72e529e60b5f74c50e4e5b159efaf80625f23534dd15a28203760b8b28ab
SHA512f802582aa7510f6b950e3343b0560ffa9037c6d22373a6a33513637ab0f8e60ed23294a13ad8890935b02c64830b5232ba9f60d0c0fe90df02b5da30ecd7fa26
-
Filesize
258B
MD5513adc528c428deac13993d9f61bc5c6
SHA1b5df2f8ca2ba768f8f04900934b6462517589c83
SHA256c3b8381fcca4e420998166f0f75c055387fc14d4cc866c4d61372440005d56f4
SHA5129ae328b9eadee24548e2f790820f0da4e9746d3711f1cd6335c26bf68ae2824ce21c5c875e8f98db3dbd2d88ef9681db529ee79948f1c4b228f4e8ce1e9a656c
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
204KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
52KB
-
Filesize
268KB
-
Filesize
52KB
-
Filesize
112KB
-
Filesize
212KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
44KB
-
Filesize
1.1MB
-
Filesize
156KB
-
Filesize
80KB
-
Filesize
6.8MB
-
Filesize
180KB
-
Filesize
752KB
-
Filesize
184KB
-
Filesize
172KB
-
Filesize
148KB
-
Filesize
752KB
-
Filesize
1.5MB
-
Filesize
100KB
-
Filesize
172KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
204KB
-
Filesize
820KB
-
Filesize
268KB
-
Filesize
44KB
-
Filesize
144KB
-
Filesize
184KB
-
Filesize
100KB
-
Filesize
48KB
-
Filesize
120KB
-
Filesize
68KB
-
Filesize
304KB
-
Filesize
100KB
-
Filesize
92KB
-
Filesize
136KB
-
Filesize
80KB
-
Filesize
164KB
-
Filesize
2.3MB
-
Filesize
1.1MB
-
Filesize
156KB
-
Filesize
5.2MB
-
Filesize
72KB
-
Filesize
88KB
-
Filesize
48KB
-
Filesize
72KB
-
Filesize
52KB
-
Filesize
820KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
52KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
5.2MB
-
Filesize
60KB
-
Filesize
148KB
-
Filesize
6.8MB
-
Filesize
144KB
-
Filesize
1.5MB
-
Filesize
136KB
-
Filesize
820KB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
52KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
1.5MB
-
Filesize
144KB
-
Filesize
44KB
-
Filesize
1.1MB
-
Filesize
156KB
-
Filesize
48KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
212KB
-
Filesize
52KB
-
Filesize
180KB
-
Filesize
100KB
-
Filesize
60KB
-
Filesize
148KB
-
Filesize
752KB
-
Filesize
44KB
-
Filesize
80KB
-
Filesize
5.2MB
-
Filesize
204KB
-
Filesize
112KB
-
Filesize
268KB
-
Filesize
172KB
-
Filesize
6.8MB