Overview

overview

7

Static

static

3

0f99e862c8...a3.exe

windows7-x64

7

0f99e862c8...a3.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    19s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0f99e862c8db88bbc85a573eb665f6a3.exe
  • Size 21KB
  • Sample231230-fsntaabecl
  • SHA256 158235bd0d096bcfe730c3d51c3205b1a724cb7fb6792bbc771fddceed8dfff6
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in System32 directory 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f99e862c8db88bbc85a573eb665f6a3.exe
    "C:\Users\Admin\AppData\Local\Temp\0f99e862c8db88bbc85a573eb665f6a3.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Windows\SysWOW64\anymie360.exe
      C:\Windows\system32\anymie360.exe
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      PID:2668

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        anymie360.exe
        • Path \Windows\SysWOW64\anymie360.exe
        • Size 21KB
        • SHA256 158235bd0d096bcfe730c3d51c3205b1a724cb7fb6792bbc771fddceed8dfff6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download