Analysis
-
max time kernel
152s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 02:14
General
-
Target
4bf55eb7e88d799e8d05fb3ac5effd5d.exe
-
Size
235KB
-
MD5
4bf55eb7e88d799e8d05fb3ac5effd5d
-
SHA1
d41b6381b09362338b351badb863c7156fced885
-
SHA256
6da42fb22d7b8b7817dcaf3ccccb5e616c19788b0d85dcb94d8a1eeba4a43951
-
SHA512
c1db670a78c5670878d4035dccbdbbef8b66b2d67d819e62cafc428b57a1105dd0d5c533610d1584da45f0cb2e18f8964972639d7bf9134c1d666aae1c5f7560
-
SSDEEP
3072:do3dh2lpR/n2gft+UN1OPbfj8IaDS29y4+Eiq8uhzXZvOAZ3dHX/dgW3Gs7vBAAO:O3KlT2WoV5b285uTDNd3ehsle
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4bf55eb7e88d799e8d05fb3ac5effd5d.exe"C:\Users\Admin\AppData\Local\Temp\4bf55eb7e88d799e8d05fb3ac5effd5d.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
56KB
-
Filesize
36KB
-
Filesize
244KB
-
Filesize
168KB
-
Filesize
80KB
-
Filesize
4KB
-
Filesize
80KB