Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 08:20
General
-
Target
119c8c34197a1b1b1b0b8a002d2d37d6.exe
-
Size
57KB
-
MD5
119c8c34197a1b1b1b0b8a002d2d37d6
-
SHA1
32248f6a21fdbab3150dcbe91e761a5cca65a4bd
-
SHA256
ea3e818b4ccacd56e876145e0011ff4a451f7c95ca4ebcea897289f96650ce03
-
SHA512
4d258f271fbfdeaea7e8cb212c336e162dbaeab0d1e0e770448147cdac6008d8c3dd0efac4cbe54078d65e2f1aacb5e5bb5575b336a53c4fc1956e556347eea1
-
SSDEEP
768:JPjJtYqJHC0qBkXvQz9j67RarlR10hHkBH5OWUmy54/QqxBfRZHvo7cSf2TL:JPl+qxVA9GRtkF5OWUH5+BJZwoP/
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\119c8c34197a1b1b1b0b8a002d2d37d6.exe"C:\Users\Admin\AppData\Local\Temp\119c8c34197a1b1b1b0b8a002d2d37d6.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\119c8c34197a1b1b1b0b8a002d2d37d6.exeC:\Users\Admin\AppData\Local\Temp\119c8c34197a1b1b1b0b8a002d2d37d6.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
57KB
MD5fed51447a90e6e65d1c7304958d004b8
SHA16c0cdf2002de7f0adf16df5966b9932082c20cff
SHA256c42809d4c5bd90bfe1f20e11085e4c652c203bf56ccd4965db93b61e4e275b02
SHA512f991313871d1fe42c564c80747128f3026036c025dad772768414571bb6f3f7c699576b238e581431476552539e4b70292893be4d94f24700cffdb97660129e5
-
Filesize
108KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
176KB
-
Filesize
176KB