Analysis

  • max time kernel
    122s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 15:36

General

  • Target

    795c9f3854c16c4a3b456bcd33bdb7f9.exe

  • Size

    298KB

  • MD5

    795c9f3854c16c4a3b456bcd33bdb7f9

  • SHA1

    c715d0adfa8511078d20d679195d49fccd35ee7a

  • SHA256

    b20ba2ff71e0f9f42c9a498e1a6059230c5afa70b6d5d430068b99864459a1bf

  • SHA512

    bce622c5da6776fabcccdf1475fe7c203c737e19093b0f8e272991de2c786e0b44fac1e25ad1cd44605a227ea9bdc81bdfec40c9433f05a193b54b7bf787938b

  • SSDEEP

    3072:G/pe7hPXEomWqLEnCYvcvIXRTy1hmUI0xlOcwVIvS3oGcFuG9hFoHk148GzMwnp6:+oXpvDx8hzNxl8VIvSiFxTO8GzMl

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\795c9f3854c16c4a3b456bcd33bdb7f9.exe
    "C:\Users\Admin\AppData\Local\Temp\795c9f3854c16c4a3b456bcd33bdb7f9.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:1076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1076-0-0x0000000000390000-0x00000000003D4000-memory.dmp

          Filesize

          272KB

        • memory/1076-1-0x0000000000450000-0x000000000049E000-memory.dmp

          Filesize

          312KB

        • memory/1076-2-0x0000000000400000-0x0000000000444000-memory.dmp

          Filesize

          272KB

        • memory/1076-3-0x0000000000400000-0x0000000000444000-memory.dmp

          Filesize

          272KB

        • memory/1076-4-0x0000000000450000-0x000000000049E000-memory.dmp

          Filesize

          312KB