Analysis
-
max time kernel
141s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
30-08-2023 13:56
General
-
Target
Sublime,.exe
-
Size
9.8MB
-
MD5
9ab809f5e004f1958c3347c6c844babc
-
SHA1
a7f40c2bb09511d89c0ecead252a41f82b7e977b
-
SHA256
72350be01792feabf1c13f66dca8fe57c65ee16de90a2345d135a38c8a8a670b
-
SHA512
a3355f29d17599a6ac97bdaa5457fc2c8289b07271723a23942fefd5220f0232a11a3e9facdb8bbb19524ca4593d6126093d5b64ce87276e789715cbe2b8799b
-
SSDEEP
196608:6WS96Wo9yWEGLNV0Ri602hQk9LO8XmwkpHj+P3OjJO6:6WSJAyWEGLQieFVWbwP8w6
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Sublime,.exe"C:\Users\Admin\AppData\Local\Temp\Sublime,.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-EVEDP.tmp\Sublime,.tmp"C:\Users\Admin\AppData\Local\Temp\is-EVEDP.tmp\Sublime,.tmp" /SL5="$80124,9927174,121344,C:\Users\Admin\AppData\Local\Temp\Sublime,.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD53a325574ae5c04843808f7461391ee6e
SHA1a462057928e8a8587a6bafda4357125ff26765be
SHA2567f2e1ee6351a5f21f479763b1a56586884be5e4bd3f50aae601144451f675514
SHA51290a079ed63baf299e93a75f3568403d63435ab8afcd00e5c18cc5a07966c890e465b7a20e7df0cf45f00339cdf82ab838d2fdfed15d185a6115b6a34b8dd4998
-
Filesize
1.1MB
MD53a325574ae5c04843808f7461391ee6e
SHA1a462057928e8a8587a6bafda4357125ff26765be
SHA2567f2e1ee6351a5f21f479763b1a56586884be5e4bd3f50aae601144451f675514
SHA51290a079ed63baf299e93a75f3568403d63435ab8afcd00e5c18cc5a07966c890e465b7a20e7df0cf45f00339cdf82ab838d2fdfed15d185a6115b6a34b8dd4998
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
4KB