Analysis
-
max time kernel
137s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30-12-2023 04:06
General
-
Target
0de4dab01651ed75b1bd8fbbddd9f07d.exe
-
Size
82KB
-
MD5
0de4dab01651ed75b1bd8fbbddd9f07d
-
SHA1
52377f62b7509d0e683a35d6e5cd76c0993d0762
-
SHA256
6b58e10ae006c3ac36ecb841b76268ea08267235e6a5ec46f1512503946de1fb
-
SHA512
746e11466050e411ec119dc5e5be38b94a6c0450dd5057187849d5d806355b39daf59cf711b0e1e69b6d1df7009d8f4b5a7fad13a95779315193a86e2e577195
-
SSDEEP
1536:zaUE0JYyvgYnfMAUEC14UyG4nxCx7zqYOC6dOv420oCsn/3jH:eURJsg0AUEC14oWCxXqYzWw42DPLH
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0de4dab01651ed75b1bd8fbbddd9f07d.exe"C:\Users\Admin\AppData\Local\Temp\0de4dab01651ed75b1bd8fbbddd9f07d.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0de4dab01651ed75b1bd8fbbddd9f07d.exeC:\Users\Admin\AppData\Local\Temp\0de4dab01651ed75b1bd8fbbddd9f07d.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD576ffbe770714abf192a9e7692d2bf46a
SHA143a0199cbcf3e86516c2a0eff342355951a3c52b
SHA256549b56e2bffdc40454fcf9ae6fabc1501ccfb273989d70d4d1c79cba3fdcfc50
SHA51256b49d97eff13260cdbb29c4b3869bd51fc25656fbc707ed1a59f6f99b2c5a16a7934ead67bfb38510faae1957364c54f9d40acd309f5b3ec8b8a78dc61defac
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB