Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 00:14

General

  • Target

    459aae963819d6510193251120570f5a.exe

  • Size

    2.1MB

  • MD5

    459aae963819d6510193251120570f5a

  • SHA1

    e5db5ca44adf96f2cf776ea6b773f7be4319ccda

  • SHA256

    16ce8b789faa3cf02e62f09fb783225ec9c0ebd6c6305f007879c0207baf86b6

  • SHA512

    4e0bf1e7da5c4f9d9ca23b7dad78277ee2fe55d913e7b6e4e46e452562bda807407efe1f24928c9865388b5dccb342fd29386de48ef9d6c29a154879563e2d92

  • SSDEEP

    24576:qbbEfhWPwNV0LxolxVQTFJYCUTY8L1vMl2107BA8cC5UwyRsswKfukN+iPm8AqNw:qbbBtScf1UEa2kMAsPKWx2Gsbyt

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\459aae963819d6510193251120570f5a.exe
    "C:\Users\Admin\AppData\Local\Temp\459aae963819d6510193251120570f5a.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2036-0-0x0000000000250000-0x0000000000253000-memory.dmp

    Filesize

    12KB

  • memory/2036-1-0x0000000000400000-0x00000000005FC000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-2-0x0000000002190000-0x000000000238A000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-3-0x0000000000400000-0x00000000005FC000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-6-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2036-7-0x0000000000400000-0x00000000005FC000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-8-0x0000000000400000-0x00000000005FC000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-34-0x0000000000400000-0x00000000005FC000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-35-0x0000000000400000-0x00000000005FC000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-39-0x0000000000400000-0x00000000005FC000-memory.dmp

    Filesize

    2.0MB