Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
25-12-2023 05:42
General
-
Target
08da3f4a0b49390561b5afad69bd726a.exe
-
Size
57KB
-
MD5
08da3f4a0b49390561b5afad69bd726a
-
SHA1
26d9c048c64ebe8016be6167813303c25f29ba2b
-
SHA256
20cec41db40eb70397e8089839f1d87971ff56158e1a6285a4b1c874195ab1e4
-
SHA512
f2d632a5859f56cea17208999c2fdb3b238af7b70faa50e052c2dfeb20c9ee2f24406444feb510d81dd514c632f0b4b13fcca8b544da99813df2333f1b5a14a5
-
SSDEEP
768:qVgcrhkj33w5x+ZVYvX4IIDlDKZ+M96Sx8PneQCRvU590jyqnYnYJbiqwFvzZ+:GgF3gwVYgDl5GRx84RvU59Ooycvg
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exeC:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exe1⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
C:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exe"C:\Users\Admin\AppData\Local\Temp\08da3f4a0b49390561b5afad69bd726a.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
57KB
MD5900b1ff428df78b29af13d16ff5e9fc5
SHA1649ef958c06ca1a5c89911c49507ff25aa70f437
SHA256692dd0dc6bac233ef73efea48f940455e3b6cb6d5deeafb1a44b1d4db17726bc
SHA512662bac22da1f2f35ba31c09454bdd87b1c7ca2d0634da82dcc2463a50ef774b28cbe8b26faf1f4c4cfbae5cc89128c35556d07fcea08f6607a5c83de34017c7e
-
Filesize
108KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
108KB