Analysis
-
max time kernel
2s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
30/12/2023, 23:27
General
-
Target
1fffa0beaf109d841c96434eff0c3488.exe
-
Size
133KB
-
MD5
1fffa0beaf109d841c96434eff0c3488
-
SHA1
9c6d85f6073a2b0794e62658ee69574805053cb8
-
SHA256
6ca589340480f13cf54d782fe05f28512c7f73b8b069b98339326bfd5b4c34db
-
SHA512
cbb8cb81f490f3af3434d4851d542650f5eae1d3cb52e7578b7bcaf1711cbba2890cfdd198131a1f08a9c39fdc980cef64fc6877b84fbcd136031ac74270edfd
-
SSDEEP
3072:UQcOd5mhAfHMzDNOgaOUxmNG/Xl6GHMGeco3PlgNJ9yZPY0GoQ:UQxd1MzDN82GMUMl3PluAPY3oQ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1fffa0beaf109d841c96434eff0c3488.exe"C:\Users\Admin\AppData\Local\Temp\1fffa0beaf109d841c96434eff0c3488.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1fffa0beaf109d841c96434eff0c3488.exeC:\Users\Admin\AppData\Local\Temp\1fffa0beaf109d841c96434eff0c3488.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
132KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
132KB
-
Filesize
124KB
-
Filesize
124KB