Overview

overview

10

Static

static

3

PO#053497.pdf.exe

windows7-x64

10

PO#053497.pdf.exe

windows10-2004-x64

10

$TEMP/29.opends60.dll

windows7-x64

1

$TEMP/29.opends60.dll

windows10-2004-x64

1

$TEMP/Ster...ap.dll

windows7-x64

1

$TEMP/Ster...ap.dll

windows10-2004-x64

1

$TEMP/WebN...mes.js

windows7-x64

3

$TEMP/WebN...mes.js

windows10-2004-x64

3

$TEMP/aspnetisapi.dll

windows7-x64

1

$TEMP/aspnetisapi.dll

windows10-2004-x64

1

$TEMP/autolayt.dll

windows7-x64

1

$TEMP/autolayt.dll

windows10-2004-x64

1

$TEMP/coyote.exe

windows7-x64

4

$TEMP/coyote.exe

windows10-2004-x64

10

$TEMP/cvtres.exe

windows7-x64

1

$TEMP/cvtres.exe

windows10-2004-x64

1

$TEMP/disco.exe

windows7-x64

1

$TEMP/disco.exe

windows10-2004-x64

1

$TEMP/emcmp.ko

ubuntu-22.04-amd64

$TEMP/ltv350qv.ko

ubuntu-24.04-amd64

$TEMP/sl-modem.py

windows7-x64

3

$TEMP/sl-modem.py

windows10-2004-x64

3

$TEMP/syst...er.vbs

windows7-x64

1

$TEMP/syst...er.vbs

windows10-2004-x64

1

$TEMP/vsslnui.dll

windows7-x64

1

$TEMP/vsslnui.dll

windows10-2004-x64

1

$TEMP/webb...35.pyc

windows7-x64

3

$TEMP/webb...35.pyc

windows10-2004-x64

3

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-06-2024 04:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/disco.exe

  • Size

    48KB

  • MD5

    3cda7f433393da8aac9ae702b69b2999

  • SHA1

    a47c935a6b10bef73dc129f278ec796045ca0cff

  • SHA256

    866476b1db9856ee0a59e70e2de96d16e7603a6642019d5da88808cd9047b268

  • SHA512

    2116e78fbcaf5760b7e81a526525736cc3115f389c22c7d7d55806333ebf377b7a27ca9cdf1346a60b0c6904d05200f39f83e6472cc84bf08373e2a032dcaeca

  • SSDEEP

    768:xX8QmFTLoVL47053UIPZgMHb3ELS57EJuFRJRh/gC:z6kVLR1UIPCMHUJITh/gC

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\disco.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\disco.exe"
    1⤵
      PID:556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/556-0-0x00007FFDB32F5000-0x00007FFDB32F6000-memory.dmp
      Filesize

      4KB

      Download
    • memory/556-1-0x00007FFDB3040000-0x00007FFDB39E1000-memory.dmp
      Filesize

      9.6MB

      Download
    • memory/556-3-0x00007FFDB3040000-0x00007FFDB39E1000-memory.dmp
      Filesize

      9.6MB

      Download