Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 12:11
General
-
Target
1d569dccf2dc574a837344a6d4f58ae2.exe
-
Size
82KB
-
MD5
1d569dccf2dc574a837344a6d4f58ae2
-
SHA1
204af3e82ea040fdb3f589be59452f32dd8c1bce
-
SHA256
053346f3badfa1505d44eeb7ed35ecb312862d7a4aa952e456e979cd9b081a88
-
SHA512
cbc7b5ee02949066645af108435c3211c57e207028fc1df65bfeecd1318aaa6cb5ba6380eb1b12cced15a4a7a8970b8e60e6827f5edc2d6d30d8b6452db69b49
-
SSDEEP
1536:wsXY2HcaStTHMIEujYUu/Y7jNd6R1l/dxWd/BorLwbQ8UaXzVfMaRj4Qib:wsSt9uaqadJm08wfMao
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d569dccf2dc574a837344a6d4f58ae2.exe"C:\Users\Admin\AppData\Local\Temp\1d569dccf2dc574a837344a6d4f58ae2.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1d569dccf2dc574a837344a6d4f58ae2.exeC:\Users\Admin\AppData\Local\Temp\1d569dccf2dc574a837344a6d4f58ae2.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5bc3402061f906884a5642c8bf9ec6cf0
SHA1d2c529c03d90d4aacdba4d530b39186651b320d8
SHA2562debc3c826f5746a8499b705c5aafa0248408075e7397470f7f61d99a369a311
SHA51265dd6a6429eb424fb30cc73bc248d409b7bd5d2be7a703baef251439e4eff949481762b85fe731fb51755f038f918b91f95c6ce43fe6c1acd58ab340bcf36d11
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB