Analysis
-
max time kernel
151s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 15:35
General
-
Target
79511c6acf08136b0ed292bf2e522223.exe
-
Size
82KB
-
MD5
79511c6acf08136b0ed292bf2e522223
-
SHA1
6a1ac4c16ed34ca26c1c9d557ae9350f32573851
-
SHA256
a0c568daee2bfa18c1b0676e0b0b05c4f00f9ecfd98cebe34b8e0cc1673ff016
-
SHA512
c1c44511a2ff07dd50142525ad3abc989aaf67456eef014f2f60ce4169124a39a53d1947d9b8a4a9e8cd301031df8119d11d0dce9ea424b943b46693c243b446
-
SSDEEP
1536:RnGI9s10ki//dsQDsRxTMamZcSO9AGvXyDys4YTNbDCJjVYRGVw:Nw1RY/d/sPTPmOtAGviDycbD85YRGVw
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\79511c6acf08136b0ed292bf2e522223.exe"C:\Users\Admin\AppData\Local\Temp\79511c6acf08136b0ed292bf2e522223.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\79511c6acf08136b0ed292bf2e522223.exeC:\Users\Admin\AppData\Local\Temp\79511c6acf08136b0ed292bf2e522223.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB