Analysis
-
max time kernel
28s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
-
submitted
05-07-2023 16:57
General
-
Target
129de9ef4c6057exeexeexeex.exe
-
Size
411KB
-
MD5
129de9ef4c60574ddb84264efc0367b9
-
SHA1
dc78dafc67f0d6d9536a612f6e7a8646de1eaf6d
-
SHA256
712c81b73503b17d3f7df5ce6ee3b7634970709447cba5bfd32aa4a984c089a0
-
SHA512
ece9fc8820e44982d20efd5a7480f37eb72ee03d6032181430a99325f43356752796f7cf534f2a97fd5eed230506b08730ffa9dd5ac18a3689af993ad9898e89
-
SSDEEP
6144:gVdvczEb7GUOpYWhNVynE/mFeK+VnIItz8WTBxnYDfkA5GNSN1qHI:gZLolhNVyEw8nIE8WTBxEfk9uqHI
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\129de9ef4c6057exeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\129de9ef4c6057exeexeexeex.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2656.tmp"C:\Users\Admin\AppData\Local\Temp\2656.tmp" --pingC:\Users\Admin\AppData\Local\Temp\129de9ef4c6057exeexeexeex.exe B567F43AE87C31C1BC3E54219CD57EC2A79821DAF2D07E1AEB67A8D44460ACA96EA993E02AC113D9F6AC272E7345936FC84EBD2AEA566A339D0A9670CEFE101E2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
411KB
MD5d750e195d3246dc7093976d58e61fc3d
SHA14b1ffd9326e84ef747b66dad247dccfb102aa531
SHA256605ab813c22b692c7c8a71abc1ca5c28efaaa5944f75e442678ff24cc19a5959
SHA51280a0fa87cb16e68425251ce2efe377e57c48ff17e7440b67a62aa6ddbe73e9a1d490009235bed142973071b7ca46be7d235b985518f5ee3108b825681525527f
-
Filesize
411KB
MD5d750e195d3246dc7093976d58e61fc3d
SHA14b1ffd9326e84ef747b66dad247dccfb102aa531
SHA256605ab813c22b692c7c8a71abc1ca5c28efaaa5944f75e442678ff24cc19a5959
SHA51280a0fa87cb16e68425251ce2efe377e57c48ff17e7440b67a62aa6ddbe73e9a1d490009235bed142973071b7ca46be7d235b985518f5ee3108b825681525527f