Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30/12/2023, 20:24
General
-
Target
1bcaca81143c113cc181ab10e4e93269.exe
-
Size
82KB
-
MD5
1bcaca81143c113cc181ab10e4e93269
-
SHA1
4ffdb63e67b8c739249408164caa72222b38fe20
-
SHA256
be6e95c99626dc80e99d57281c02d4a0a36376e51caab6958db780d20271695a
-
SHA512
d28e94a8aca61677d18f301db93f005f80f3d5bb59868bfbf46e1fd10a30a5f487bd7c9382b1704587d0fad8ed73506fa3747b2c38e3fa6d8b0e4692f19764d4
-
SSDEEP
1536:afIZ99sUKRRBLCkcLfPkBCDDMyUsEP/E3+se02+KAFQAMortImJl9:afIz9sU+jmRICXMW6/E3cfASAJZJl9
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1bcaca81143c113cc181ab10e4e93269.exe"C:\Users\Admin\AppData\Local\Temp\1bcaca81143c113cc181ab10e4e93269.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1bcaca81143c113cc181ab10e4e93269.exeC:\Users\Admin\AppData\Local\Temp\1bcaca81143c113cc181ab10e4e93269.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5cd4382121e762c0da5feddb20e663f13
SHA1164990b2b715f33121e70cc526cbb0a15fe33e93
SHA256b8c3cccdec686cf443492b230b92d54b6374bf18a0391610119c2b558786ea1d
SHA512c3e1e078f51d426ba76d044a9186318c59de71bdc65dc283862557b7d949843fd7b6ffc98f875d580be2874f3eb28c3a7852cd816295e897f6316ba8cad4ef13
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB