Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 11:56
General
-
Target
17b596460a8732b1d666b8892e499f76.exe
-
Size
82KB
-
MD5
17b596460a8732b1d666b8892e499f76
-
SHA1
84cab561b2d95a2e18cc207dcc8ec6a49c141426
-
SHA256
c4da34362a979ec6fc9b3eb304df439461d7988b06d56bc190c4d8a73c97cdc9
-
SHA512
044108c1d46f6d03b6897934027315d603f279d862eb3f90fcdeaa7c8b6a48cb53d33336f16ba572bcf7867d746c0496d36623517e9f8fe0fdbc4dba106b4cdf
-
SSDEEP
1536:37bZmEz/o8Notnw/vZYbXyd1kivVPpu4khNvgfe+pj+wY:5hwnw/vZwXydOIVPs4khNweYj+wY
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\17b596460a8732b1d666b8892e499f76.exe"C:\Users\Admin\AppData\Local\Temp\17b596460a8732b1d666b8892e499f76.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\17b596460a8732b1d666b8892e499f76.exeC:\Users\Admin\AppData\Local\Temp\17b596460a8732b1d666b8892e499f76.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5bc1867a5110f170077f27ab3679bd36b
SHA19f0b6f082543bb3dd67f7b9b1f32ab3e4e4df951
SHA2568ab8791657f0e94f6b05164372d6fefdd80db7a63d9559daa738e3c1d979dfd8
SHA512819e3bf52a4d589eaf0bf7046a18be8d09e69e2c8a058833858068e271e8eb088e25141dc4b215054ad4e3c58091701ca2fb19b0f8987b596a2d2f01bfcdd8f0
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB