Analysis
-
max time kernel
119s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29/12/2023, 23:06
General
-
Target
0677b0135b9a70007070e4726deb1f92.exe
-
Size
82KB
-
MD5
0677b0135b9a70007070e4726deb1f92
-
SHA1
8970bf655a0742e46f6cd5cecb94c130181c1a17
-
SHA256
1c1a3a891b9fb2e7d80f740270f7168a5c355ac1308ef45ebf543ebb904bb0d8
-
SHA512
e9acd2082c17bbc3e2faa0d2218599059cdf56293b814f99167eeaafd694413ea9936df9b979d48a47cad5459a01e4e70640fc813fdfd644f2dc4cf13174c7e8
-
SSDEEP
1536:els89QxOFs07/ErRSByTuoM7I+aA5j+fLWrN0W58+/eVcvEwdLm9EM1qToVXMu3W:IBKYs07yRKyTus+KLWneVccwdLm9EVue
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0677b0135b9a70007070e4726deb1f92.exe"C:\Users\Admin\AppData\Local\Temp\0677b0135b9a70007070e4726deb1f92.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0677b0135b9a70007070e4726deb1f92.exeC:\Users\Admin\AppData\Local\Temp\0677b0135b9a70007070e4726deb1f92.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD525050bb80d9437ada44823d2bb0484fb
SHA1b16eeaf9e192b0c5c3b5d8816d2c90d3846e4dc7
SHA2563cdc808b79325fde8b3c70d9e9868b8b2b2a8176816200d443614b080caa5eed
SHA512487992505d5577d17cda89d65aeb55b5c2f5f84bc755ada63dfe3cd8758cfe506529a2a790762328c88a88622d51aa5d18ab8f2bbed7d6726d0430851a937036
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB