Analysis
-
max time kernel
136s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30-12-2023 00:53
General
-
Target
0927a20cfdd95461edf8ace6e2920975.exe
-
Size
105KB
-
MD5
0927a20cfdd95461edf8ace6e2920975
-
SHA1
95dc3b72dcaeba882486c8480ee3bf9fcd6b184a
-
SHA256
92ac14c4fa442f3cbb46e4df7fc3d3d7cc080534c9256fdcd1c3977ad4c6ce6e
-
SHA512
ce7f006d962d9b4e85e4da6de8e6017e15fb181c40edfb7352cd949ff5840e3c91d079a6b150e4a17500e4f9440e8876c7da7ccda79a283c8470bb0ad36cfaeb
-
SSDEEP
1536:mct+aKxos5K/5ANSGqqQYzETJjlBaMdLJZqm++mt3s8MfiTt6DtW9YH:PtmvQhXjBXJ7VDqLVupW9i
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0927a20cfdd95461edf8ace6e2920975.exe"C:\Users\Admin\AppData\Local\Temp\0927a20cfdd95461edf8ace6e2920975.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0927a20cfdd95461edf8ace6e2920975.exeC:\Users\Admin\AppData\Local\Temp\0927a20cfdd95461edf8ace6e2920975.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
105KB
MD58e02586d029c2f5648f7cb732c3a4fd9
SHA172e6f146b53d64661b2bf62bedeeb1043a9e0e66
SHA256ae2be188502dd1193e4c25d5df49c3fb10fa2f1f1d802aeb3cd5f4ce38e8b4d0
SHA51296605c7494805be24a4341039633a082fc9c824eaa15afbf2111eb0c9e57c49ae342f9adb63c97bdbdfdbb2e9efab09e798a07e5bbd7033d7f976764eb7c72d7
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB