Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30/12/2023, 00:54
General
-
Target
092d154bc4b4d341c694cfd337695b6a.exe
-
Size
82KB
-
MD5
092d154bc4b4d341c694cfd337695b6a
-
SHA1
581bb3acd97773de8ef4a0bcb3f3658e4fa9d862
-
SHA256
a660bae0dea1a47cfb99923e4b7ba94089ba501e260ae23177819ad80c1e0aaa
-
SHA512
a140dc292d02b2f111dc724bce2ec2fe24d41eeafbabaaac7526fdc3b6e51651685fcc5ecfc978bbd7486141085c0e1907cb74a22ff34e6fe66eb4daa55c4dd4
-
SSDEEP
1536:OuuxdBl8fvpSyEK0wDzMM7udY1ywnD+FJFWnowTVmzFED9tVsBAkWrPRbJ:Ou0XUCKgbY1zD+FnWoAmZEjVs2vPb
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\092d154bc4b4d341c694cfd337695b6a.exe"C:\Users\Admin\AppData\Local\Temp\092d154bc4b4d341c694cfd337695b6a.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\092d154bc4b4d341c694cfd337695b6a.exeC:\Users\Admin\AppData\Local\Temp\092d154bc4b4d341c694cfd337695b6a.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5b7dfff875475ebbf04e4490135d95676
SHA1c26de7e11ebad7f0860af76be5b70362f36d63d9
SHA2569964ffaafc5d202e774ad34bb986c6cc009b365126978d9c3e7573df4fbb8380
SHA512edeab715ad37c6185318eecd15a2a845228c21b1ee225f1f4bc1ece628cc998c8b5c53f946ece4209ca16fa8edccc8222daeaaebff07121ee571a3bcf6c7feda
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB