Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30-12-2023 09:56
General
-
Target
1516a7a1170299568fe91d028cd3ddf8.exe
-
Size
1.7MB
-
MD5
1516a7a1170299568fe91d028cd3ddf8
-
SHA1
dc38a68218f02678fbdaeba2d79d408969d4c31b
-
SHA256
f6d29967dd58634245c17a0362db041f992eb69f16ecc0e2e35bac21c19105d0
-
SHA512
e5ee55521206020835aecc404e3b490ea746c617d4703f7b41b54c14cd73b177281853c485c3e191408499bfca3db941e2dd5cf7b8429bfe3e4359b1b432729a
-
SSDEEP
49152:5aWB6ZJh+LO25VLrOGka1UPSoO5d4inXBgJ:QWB6ZJh+LO2bVUNO3RgJ
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1516a7a1170299568fe91d028cd3ddf8.exe"C:\Users\Admin\AppData\Local\Temp\1516a7a1170299568fe91d028cd3ddf8.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-NT884.tmp\1516a7a1170299568fe91d028cd3ddf8.tmp"C:\Users\Admin\AppData\Local\Temp\is-NT884.tmp\1516a7a1170299568fe91d028cd3ddf8.tmp" /SL5="$70122,1513022,54272,C:\Users\Admin\AppData\Local\Temp\1516a7a1170299568fe91d028cd3ddf8.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
752KB
-
Filesize
4KB
-
Filesize
80KB
-
Filesize
80KB