Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30/12/2023, 20:12
General
-
Target
1b967bab45f5e087199619c0c2c36dce.exe
-
Size
82KB
-
MD5
1b967bab45f5e087199619c0c2c36dce
-
SHA1
b048e5a55b82a0ebe6085bb4c70180028c2ef2c6
-
SHA256
2764a72ee2deb234ec371d5151223ade09bf221e95defc1ee812316dc8d98ca0
-
SHA512
826ae50b550ba7fdfb0fe3d35c2f0955500083efe22d1ea65860e23c271da7d59319ad77776a4d17cbf9a5d613066c8e5b95927b0bc23f7236e9466726039e66
-
SSDEEP
1536:4piy6Iy2L5ZZfG/qgUcYmhdzuXDrBKIyeZ9GIfPGWFBNO/NqKSkBTzJsDUXYf2l:4piyh5Zc/F0mhdzu8ezlPRTg/NJzBTzN
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b967bab45f5e087199619c0c2c36dce.exeC:\Users\Admin\AppData\Local\Temp\1b967bab45f5e087199619c0c2c36dce.exe1⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
C:\Users\Admin\AppData\Local\Temp\1b967bab45f5e087199619c0c2c36dce.exe"C:\Users\Admin\AppData\Local\Temp\1b967bab45f5e087199619c0c2c36dce.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD506badcf4883ef9b5f97839b69c207340
SHA1036f4cbfd96aed629ff2b1aaa9ab421d148d7a1d
SHA2561bfe073efb439f6d7e2d3f210d5b54750a445a706c1d30b36fab9f01c05ab059
SHA5123803accdbb596b34e31cfd83241c3de6c4c7eadd8127594eb97ef843dd488fbbe6eb88035f6a2e586a3f46350ec25721d3c9abbe668cf0ba1a992dcd345946d3
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB