Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25/12/2023, 04:34
General
-
Target
0567f5a908f8c180808f7247a354924a.exe
-
Size
84KB
-
MD5
0567f5a908f8c180808f7247a354924a
-
SHA1
ad6980bcf1b7b8f52b0922dd7fbb9e32d60fda5d
-
SHA256
6b9f3ec904cbd1034891706ff97da8d414194a7515f0d591b1395592822925bc
-
SHA512
1210732058d260c68e611ac34efd9235f3a950d930d7f5ce2b8399b6d6df3e2bd366d40169891f7ddfe140aa0ecc6410f56935e170b57a5d732f57a7da144222
-
SSDEEP
1536:GLbXem+3ApnneANpcwr6P6a69gc/AWcAsvQlBULsaW:yTe1ApnneANpUiaCgwlr4Yb
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0567f5a908f8c180808f7247a354924a.exe"C:\Users\Admin\AppData\Local\Temp\0567f5a908f8c180808f7247a354924a.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0567f5a908f8c180808f7247a354924a.exeC:\Users\Admin\AppData\Local\Temp\0567f5a908f8c180808f7247a354924a.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD553e68af41641e03f64104b2817076cab
SHA1aa167fe1ddd72977059bb2a1e8d37c0930fcbb93
SHA256e83a5a49ee436de20417dbdb29470b6767163a98859505aa3503c992d14e9f18
SHA5125ade1013e0005d7d801e37a435a109be603569d645348be73f8cdb8f538d4d268c65e4de564f08419e53458dbedb8c0869d314f641712b2a009e31a364e8625c
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB