Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19-12-2023 11:31
General
-
Target
14c8d2e35f0bb3d2e6836215c525b0d8.exe
-
Size
1.9MB
-
MD5
14c8d2e35f0bb3d2e6836215c525b0d8
-
SHA1
08969edf416d92471e0f0fedaed08d89f7403457
-
SHA256
b7c698e144261026db338bdc519cebbd7f94f4eb727e2af83196b48fec8927c6
-
SHA512
5edd26886c935665b883a99ea4027c2890dc06253fb390f00fb25ec87be61305c0c50a4307a0ce9c8c696748281e2e4eb4c26ca976aa240c9f1df88f08653710
-
SSDEEP
49152:Qoa1taC070dU83peDSHjfpp2Eo7DRMZj8EY:Qoa1taC0T+7Bo79kbY
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\14c8d2e35f0bb3d2e6836215c525b0d8.exe"C:\Users\Admin\AppData\Local\Temp\14c8d2e35f0bb3d2e6836215c525b0d8.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7955.tmp"C:\Users\Admin\AppData\Local\Temp\7955.tmp" --splashC:\Users\Admin\AppData\Local\Temp\14c8d2e35f0bb3d2e6836215c525b0d8.exe C3EE3B592C35278505207C57AFD73E81DD5EDB344790BD743163C23ECD0C8FDB1F6CE4A040DC1A6183EE70C01FD9B416968E5B1208A43E5D7DCE6A09C309C07B2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD5c8cdb8edbcc37794d601341fd239e748
SHA1b3e97efdb79dcfae086c7f3132b2bf18c1588ef9
SHA256cfafb65433166ce2567138de413572c6f54809ec0903dae272ded9ee63a48cc9
SHA512a3f99776ead47170afa05b9b3d8ccf593386f12861d81380d69ab051ad1d8e5c774c0a87f3313f8aefdc12b5f1e6fee2791032ed23d08cb87f9d47f4f318ea69
-
Filesize
1.9MB
-
Filesize
1.9MB