Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 04:42
General
-
Target
05c06c1d369565d12bed03ca73dc1d66.exe
-
Size
169KB
-
MD5
05c06c1d369565d12bed03ca73dc1d66
-
SHA1
eab88027e6d83c506d79d6215598ffcf8864a1ae
-
SHA256
f21ee120f0578e8a176872cd8d254853e2158c95d5fa221209410965cfe19483
-
SHA512
53460dec4e61b98e5118c31b0d0ee938cbb86b8a8d286003eb86f9d6259714bff01de00d5bdb93a013d0e47d67f1251d6535ff1baf1babe2d5a5787132e1ffc0
-
SSDEEP
3072:rEBinUVFWlu0eYqu30KOmOKlN+F2M46X6t1e75bCyZ94hi1ffHef0ZgUKRE2NrrX:8VcMtEEKOmOKr+F2gX975jUEeseUTUXX
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\05c06c1d369565d12bed03ca73dc1d66.exe"C:\Users\Admin\AppData\Local\Temp\05c06c1d369565d12bed03ca73dc1d66.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\05c06c1d369565d12bed03ca73dc1d66.exeC:\Users\Admin\AppData\Local\Temp\05c06c1d369565d12bed03ca73dc1d66.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB