Analysis
-
max time kernel
141s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29-12-2023 22:53
General
-
Target
063272bdfc1411a09de6701bc1c6e0f5.exe
-
Size
82KB
-
MD5
063272bdfc1411a09de6701bc1c6e0f5
-
SHA1
2dc17767cbfd1c792eeca6b9ada5f8e4596b8bf9
-
SHA256
65e01aad39097d8307f879edfb295b7322164c7e516a74eeb1e0175b5ae28934
-
SHA512
607dd807678b04097307214c770b5ac067320e0bb6372a30ba3e184cf20f10f5336c87df3648d076c4e1ab782624953faa5e8f110e3ea00eae524e21f4a3311e
-
SSDEEP
1536:zHtPg+uzyaupfmQblxk8QRpqBJJj2ogg8jq+VempMZZk7GJ:zF9umDfQPqBuog/rMZZk7k
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\063272bdfc1411a09de6701bc1c6e0f5.exe"C:\Users\Admin\AppData\Local\Temp\063272bdfc1411a09de6701bc1c6e0f5.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\063272bdfc1411a09de6701bc1c6e0f5.exeC:\Users\Admin\AppData\Local\Temp\063272bdfc1411a09de6701bc1c6e0f5.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB