Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
31-12-2023 00:56
General
-
Target
225c931c1d325ba754946aec1ddb5e8f.exe
-
Size
82KB
-
MD5
225c931c1d325ba754946aec1ddb5e8f
-
SHA1
d224464300d60dbb8161a62f0c7db723230195c5
-
SHA256
ae30e442ddf58c39522083dd6c9e418937439bb7a4326fdc12bacfaf21133989
-
SHA512
d5e3d285f609b5c46b361531f241de7c2e3914ff7fc38999d3515555ccab84419469b36842972ec0a98ff5fd16fc0ee22a70ccae844474190cb6b7271631ee94
-
SSDEEP
1536:wiSKgipx39Ac6peWM3KoVQdoWR0pWof2o0kRe:wuDaen3FVQdoWR8Wof2o0kRe
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\225c931c1d325ba754946aec1ddb5e8f.exeC:\Users\Admin\AppData\Local\Temp\225c931c1d325ba754946aec1ddb5e8f.exe1⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
C:\Users\Admin\AppData\Local\Temp\225c931c1d325ba754946aec1ddb5e8f.exe"C:\Users\Admin\AppData\Local\Temp\225c931c1d325ba754946aec1ddb5e8f.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15KB
MD5415175e512830f27dd7f4371a65864f3
SHA1de25d9e122b031f0af5829b1264e935907db6faa
SHA256b11a53d9dbecb127ff8c756195ef446dc3d5c845d2a857201ad88efbf2c79216
SHA512e4e0df7c5245b0e467e6d16e3b7fc63a28da0162575e3a8b5525b824eb746397a2207daef2359c3ca09993e072ae7ca04db7e9d441b92ac8d2937ce786358248
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB