Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
24/07/2023, 01:31
General
-
Target
02aac6f6d583008a1d2e645795df33ab.exe
-
Size
414KB
-
MD5
02aac6f6d583008a1d2e645795df33ab
-
SHA1
f8479069f5b813866b97311bf3816556a481520e
-
SHA256
cd82fce28604de2cb6b526aebf3c7114bf6ecdf9e176d6605ad06f4e7822af90
-
SHA512
dce5b9f0785ed65a51ca6963209b95e3df8d4b0c926dbac6fe81292214cf96d984299b7e27a9e718e32a351057f70db2d90b21d69760fd8a603da7c0befefef1
-
SSDEEP
6144:Wucyz4obQmKkWb6ekie+ogU6BY5EWIXyRa3F8t5rSC4to1EpjXHfTbLTtF+0KTl:Wq4w/ekieZgU6eIiR5b4touZfH/b+xl
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\02aac6f6d583008a1d2e645795df33ab.exe"C:\Users\Admin\AppData\Local\Temp\02aac6f6d583008a1d2e645795df33ab.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\85B3.tmp"C:\Users\Admin\AppData\Local\Temp\85B3.tmp" --helpC:\Users\Admin\AppData\Local\Temp\02aac6f6d583008a1d2e645795df33ab.exe B29A6ACC943F1FCEDD001CF40F7A0561C03A2BF17B577D0F6D3EC1834F5D865F2EF7D35A9DC60BB7F8999C351A6FC0A74E7FC6AA267B2362B2A016C4118887342⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD5ca7caf5d52ed6a931a6c348aac384b81
SHA1880d8e14f801aacd3d918d0802c18005d9d40a09
SHA2569acff85f86dc9edddb46167c2fad353480a61f45946877a4522108bcd12dbfd2
SHA51275336702125ba32d1fee6ee76107201dd23fb38571283c1206d43779f7f77063dbdb55064ace9891ed9b03dd68e2ac49c3c5683db291ed5629bf538b8a9e4dbc
-
Filesize
414KB
MD5ca7caf5d52ed6a931a6c348aac384b81
SHA1880d8e14f801aacd3d918d0802c18005d9d40a09
SHA2569acff85f86dc9edddb46167c2fad353480a61f45946877a4522108bcd12dbfd2
SHA51275336702125ba32d1fee6ee76107201dd23fb38571283c1206d43779f7f77063dbdb55064ace9891ed9b03dd68e2ac49c3c5683db291ed5629bf538b8a9e4dbc