Analysis
-
max time kernel
140s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 14:45
General
-
Target
263e0a3f73e50aaa30bb64f6db4dbe0c5ad0c8e2d5d963e24ca1f3b71ba02694.exe
-
Size
143KB
-
MD5
be5c091a4e363a7d15db9d1fc724f452
-
SHA1
d31b47a08cbcae788b067fb74c542c946c09d969
-
SHA256
263e0a3f73e50aaa30bb64f6db4dbe0c5ad0c8e2d5d963e24ca1f3b71ba02694
-
SHA512
288423fd52647afeaef15386448f4abfe939d76eb6db78d104939cd59265953ad0d134469717841245fec1560665c9598536c66027ca1ec373965ac6da778b0a
-
SSDEEP
3072:ryrkifLHxHZHjHFH7HnH3H7HjH12WkhHpHHHjHvH/HdHTHZHfHvHJH3HvHZicwev:rNRy6LG3
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\263e0a3f73e50aaa30bb64f6db4dbe0c5ad0c8e2d5d963e24ca1f3b71ba02694.exe"C:\Users\Admin\AppData\Local\Temp\263e0a3f73e50aaa30bb64f6db4dbe0c5ad0c8e2d5d963e24ca1f3b71ba02694.exe"1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
-
Filesize
76KB
-
Filesize
100KB
-
Filesize
8KB
-
Filesize
156KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
156KB
-
Filesize
20KB