Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-12-2022 13:54
General
-
Target
6ac94a61660e69604605389ddc3109e856f1753b2db4c2e5bff5fc1a3b33fd59.exe
-
Size
746KB
-
MD5
f84cebbf0e1a229a02463e0aa2a8c6f1
-
SHA1
bb557eb963d628f745f4638a98d9d683a9cb0a7b
-
SHA256
6ac94a61660e69604605389ddc3109e856f1753b2db4c2e5bff5fc1a3b33fd59
-
SHA512
17a3c819058fd1e03d13ccc73e4067b1fab2c7f2b77cdb83b2d4c52313d86005d74ccff05d87471f51dd5d3b62ec77b501600eeb29cd44458665639fe7304d48
-
SSDEEP
6144:Q6viUNIPcmmmRm4EG76adSNc/B9XgGJ2Fc+y6xr:QtEmREGO8oc/B9Q1xr
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ac94a61660e69604605389ddc3109e856f1753b2db4c2e5bff5fc1a3b33fd59.exe"C:\Users\Admin\AppData\Local\Temp\6ac94a61660e69604605389ddc3109e856f1753b2db4c2e5bff5fc1a3b33fd59.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
-
C:\Program Files\qimi\Au_7Me.exe_DFA9983F57AF475C964D400A29E73BA4E1738ED2.exe"C:\Program Files\qimi\Au_7Me.exe_DFA9983F57AF475C964D400A29E73BA4E1738ED2.exe"2⤵
- Executes dropped EXE
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
288KB
MD5d7a053ed5d3cf670ea9c2dab302f0fb9
SHA146b1d6a73aaa9e276376546a03855b28b54ec6f4
SHA256922af7b37aed2a8d1c6fdea17135e8ac4992a30105c49405b9d62e9f6ebaf7b7
SHA5129f634981bf3b3e34d0e93a2f5b687946b620263c52d25ea66f6769050bc62f811ce44370922c8cbbcf4b3181b21f20ee02454e711853c0bd9622f440e27a98ef
-
Filesize
288KB
MD5d7a053ed5d3cf670ea9c2dab302f0fb9
SHA146b1d6a73aaa9e276376546a03855b28b54ec6f4
SHA256922af7b37aed2a8d1c6fdea17135e8ac4992a30105c49405b9d62e9f6ebaf7b7
SHA5129f634981bf3b3e34d0e93a2f5b687946b620263c52d25ea66f6769050bc62f811ce44370922c8cbbcf4b3181b21f20ee02454e711853c0bd9622f440e27a98ef
-
Filesize
296KB
-
Filesize
356KB
-
Filesize
356KB