Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2023, 13:17
Static task
static1
Behavioral task
behavioral1
Sample
9ded71f6c57ef668ba0100372cfe5812.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9ded71f6c57ef668ba0100372cfe5812.exe
Resource
win10v2004-20231215-en
General
-
Target
9ded71f6c57ef668ba0100372cfe5812.exe
-
Size
1.9MB
-
MD5
9ded71f6c57ef668ba0100372cfe5812
-
SHA1
3b48bd14fdf39e3575ed080aa288c50b246b38e2
-
SHA256
f50888a3c4f9133a8d49c157a62ef218c9cb44ebde8b4ca9b1b0fb05916ee7cc
-
SHA512
32693af2227fdecd03ce8fe56e7e0168f372b827119c55aa29ebd6b88ee12382ea1f56c9b4f91de68dd3903081e3d894b565728663463cebed7a35b65f8db5d8
-
SSDEEP
49152:Qoa1taC070dolOKq+SZu1606cAmsi+pck5Nnp6ZJMX:Qoa1taC0dOqSZjiOdOMX
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 3420 4D84.tmp -
Executes dropped EXE 1 IoCs
pid Process 3420 4D84.tmp -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4460 wrote to memory of 3420 4460 9ded71f6c57ef668ba0100372cfe5812.exe 91 PID 4460 wrote to memory of 3420 4460 9ded71f6c57ef668ba0100372cfe5812.exe 91 PID 4460 wrote to memory of 3420 4460 9ded71f6c57ef668ba0100372cfe5812.exe 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ded71f6c57ef668ba0100372cfe5812.exe"C:\Users\Admin\AppData\Local\Temp\9ded71f6c57ef668ba0100372cfe5812.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4460 -
C:\Users\Admin\AppData\Local\Temp\4D84.tmp"C:\Users\Admin\AppData\Local\Temp\4D84.tmp" --splashC:\Users\Admin\AppData\Local\Temp\9ded71f6c57ef668ba0100372cfe5812.exe 21D384599A900A38B1C504F968E0C81098ADDBBC2F8C11B9C8D3B82B85838E5987051C3DCFB4D8CCFA1FB25DF02E9E0D849E34164E60381771DE29EC812148C52⤵
- Deletes itself
- Executes dropped EXE
PID:3420
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD549da23adf3e45fc9edd6eb580739eb95
SHA1ec3321e351711163cef4fd1892fdf8e019eda562
SHA256c15fe15dede858cc56b6ab9f73fd342fc849df55f82f9629f5cef909598347e4
SHA512681fd605ecbef73b6d98d228b3c3090000bc9bef6a69ca9c41feaa3de633f9690506fc918fe9ce8678a8d1993d3e5c2c45fec9b5a52df547f690b40f85e5f4f2