Analysis
-
max time kernel
8s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 21:58
Static task
static1
Behavioral task
behavioral1
Sample
1dcf313c7b9200277a88700ff036b5a3.exe
Resource
win7-20231215-en
General
-
Target
1dcf313c7b9200277a88700ff036b5a3.exe
-
Size
1.2MB
-
MD5
1dcf313c7b9200277a88700ff036b5a3
-
SHA1
2bcf6d85a214e8c5acf6bdf845d51776318e059a
-
SHA256
6ed40b29d8cbea35c1fba43b81b4ced3dd22dedb50871ac1168513826f4332ff
-
SHA512
526ab3ad4eef95b92239e5d7d48a0f42fcb04e1b52591bd4cf79e0e51cfc20a24e2918451f6837825b023fe5e4892f7e04b7dfd207cc36b0f54ee61cf1678685
-
SSDEEP
24576:YaUZCHwO1d1QqbBE2tTBFSZzuKo0gNEPSwDOCzwJSbc7wmersHL:bQqtnLRs6MwJS+7
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\RemoveMenu 1dcf313c7b9200277a88700ff036b5a3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1dcf313c7b9200277a88700ff036b5a3.exe"C:\Users\Admin\AppData\Local\Temp\1dcf313c7b9200277a88700ff036b5a3.exe"1⤵
- Drops file in Windows directory
PID:2088 -
C:\Windows\SysWOW64\notepad.exe"C:\Windows\system32\notepad.exe"2⤵PID:1320
-
C:\Users\Admin\AppData\Local\Temp\cmd.exe"C:\Users\Admin\AppData\Local\Temp\cmd.exe"3⤵PID:2740
-
C:\Users\Admin\AppData\Local\Temp\GetX64BTIT.exe"C:\Users\Admin\AppData\Local\Temp\GetX64BTIT.exe"4⤵PID:2624
-
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b4cd27f2b37665f51eb9fe685ec1d373
SHA17f08febf0fdb7fc9f8bf35a10fb11e7de431abe0
SHA25691f1023142b7babf6ff75dad984c2a35bde61dc9e61f45483f4b65008576d581
SHA512e025f65224d78f5fd0abebe281ac0d44a385b2641e367cf39eed6aefada20a112ac47f94d7febc4424f1db6a6947bac16ff83ef93a8d745b3cddfdbe64c49a1e
-
Filesize
92KB
MD58765fd5f53220ee1d49cf1e9d4fecb6f
SHA16c5d9ddaef1802264f4a7297a3d7b7cba6815b75
SHA256e141c6f75c9cf4d1f1b0fb5a3232f74f82cd0a35a03f260dbc163f9839c9c672
SHA51258c217e1c55ff2e5e12553f986621ae0bb5c84dbe1ab9d9a1bae7dd3090bfd8c7ace52d3a7070ffd8388cc2763d1b485b8e76ab4da0cdab8b72a34deb622f7f4