Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 19:52
General
-
Target
0efad08f8102418661096c4c777587e8.exe
-
Size
28KB
-
MD5
0efad08f8102418661096c4c777587e8
-
SHA1
4259edfd7a3c3e2e81dcd24c5e7eba5698022e3e
-
SHA256
d47788fd7cea714c3053ee24e8ea312449b2ef79ff7e334b5245abbba4cee794
-
SHA512
680c6811a6b8942b6619e6009719f4f12dd57a2e6d1fcb5d98b56c801559fafebe8ef8ad5342f34885f828323ac40179e4531da6a5b27b2366983ef6190e98eb
-
SSDEEP
768:MzbKzyKmJnHyAtKzCIneHrCraj0wKPkEjs20er:KbIyLnHgz3neHryajCcKVJr
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0efad08f8102418661096c4c777587e8.exe"C:\Users\Admin\AppData\Local\Temp\0efad08f8102418661096c4c777587e8.exe"1⤵
- Drops file in System32 directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\NTdhcp.exeC:\Windows\system32\NTdhcp.exe2⤵
- Executes dropped EXE
- Drops file in System32 directory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD50efad08f8102418661096c4c777587e8
SHA14259edfd7a3c3e2e81dcd24c5e7eba5698022e3e
SHA256d47788fd7cea714c3053ee24e8ea312449b2ef79ff7e334b5245abbba4cee794
SHA512680c6811a6b8942b6619e6009719f4f12dd57a2e6d1fcb5d98b56c801559fafebe8ef8ad5342f34885f828323ac40179e4531da6a5b27b2366983ef6190e98eb
-
Filesize
116KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
116KB