Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 23:15
General
-
Target
18bb2acecc8ec2cb59b3f5e6ab6990aa.exe
-
Size
82KB
-
MD5
18bb2acecc8ec2cb59b3f5e6ab6990aa
-
SHA1
145e9a823d5e40d3f25afb588a9130c15c2ac627
-
SHA256
16ed7390517dccbf6f63be71b00aa54a16fe89ee502e03c84084e16b94156d3b
-
SHA512
041675d8afa37ced1e28401ff68f04e96596b1bd85d49118c8494f591e2d237654563cfd51182d53a5c076a257c578a8f152e7388328df11e9779a9fc44ba2fb
-
SSDEEP
1536:RF8TRARWh4DtA1pdJRfYXoJE2i3d/1pqBm5Xl5emL6IewmKGc1:n8NAnDtKTfY4ax3d//qBmdl5eQdewBGg
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\18bb2acecc8ec2cb59b3f5e6ab6990aa.exe"C:\Users\Admin\AppData\Local\Temp\18bb2acecc8ec2cb59b3f5e6ab6990aa.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\18bb2acecc8ec2cb59b3f5e6ab6990aa.exeC:\Users\Admin\AppData\Local\Temp\18bb2acecc8ec2cb59b3f5e6ab6990aa.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD561dabb54c655d8c051c50f6ff617f5ef
SHA107bdd9db8a72e81f3ae38182c44f3e3bbc6718ea
SHA25646e4309174395efc07d364e72009bc0089a4202b0d8abf0d5f920c780ac432e4
SHA51201765ed0c114fb4bed41ed6c6ec5228104ffbabdf1554210f4c1719261409d7be1fc7564a9b833bc9e1e64e164237df273a289e8eb96818ecbc5a61768d1fbac
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB