Analysis
-
max time kernel
147s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 05:03
General
-
Target
566e5ea063574121dc7f6b4842b57ca3.exe
-
Size
105KB
-
MD5
566e5ea063574121dc7f6b4842b57ca3
-
SHA1
55cf9f0174af726507c4c1698a60efc78299d6b5
-
SHA256
28ee80c1c424beeb9e9d81a4f1820bfe03ab0f6bbe9415390c90ab5aca457a24
-
SHA512
6ab908fe47f3fc7e6517dad1b80630fcb810a1d847473a61524a727a814b6fe2a1c60ea408cb31ea87b7a52e17826c6aac0e4a8f8e0066700e54feaf942e7c16
-
SSDEEP
1536:przqYY2aXhDPFP9jXzCljlN0eJFykSRDeipU88toxSxIyIrimUjiTt6DtW9YH:xzdGPBW5agrSRDPeo4qniDTpW9i
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\566e5ea063574121dc7f6b4842b57ca3.exe"C:\Users\Admin\AppData\Local\Temp\566e5ea063574121dc7f6b4842b57ca3.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\566e5ea063574121dc7f6b4842b57ca3.exeC:\Users\Admin\AppData\Local\Temp\566e5ea063574121dc7f6b4842b57ca3.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
105KB
MD5f865a78e5a3f06b7b6b57ce3e44d7d38
SHA1833723df650fe8105d86d129f05ffdc5b85fb454
SHA256bee60c27db8bee36ceb460854d00e8b6f8069513f2c1506d34f8e50012d81c2e
SHA5125a0310f3d3b6f5b1df8139c30d71eaf487cb1a2d623697d4957a3f6fd5025332b33e2ae709e206dc6c8caf6115744cbc106573fe0f73a287b2ec6fce22390029
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB