Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31/12/2023, 02:56
General
-
Target
2561ee60200946fb15c135556c18afd4.exe
-
Size
166KB
-
MD5
2561ee60200946fb15c135556c18afd4
-
SHA1
c51cc8caa0a8fb43a26fd6888e3ffaed28b31dc0
-
SHA256
c463508379aa9f1148fda0e0601c7a45413e304d00fea4eede57c99fbd85d6c0
-
SHA512
c020f4ca47d3f1d2b30164453f1b8246c6d2d97caea3af4668219b9590f9fe9ef077271b6f7cd978410691ec8b6aff0c7b1cd132c33f1db4bc37430c5a54baeb
-
SSDEEP
3072:BQWGyUALvEFyuhH3NPCpOBknkljtsF4HPITH93X/16tAkHY4qSdbh07oJ:KXRjFyuhH30OqkjEbH9f166kF07g
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2561ee60200946fb15c135556c18afd4.exe"C:\Users\Admin\AppData\Local\Temp\2561ee60200946fb15c135556c18afd4.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\2561ee60200946fb15c135556c18afd4.bat2⤵
- Deletes itself
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
254B
MD5a58d826ad13e5935bdb0135112b255be
SHA1f53b32e17153ac4dbc186654b5dc5f8c3c21c774
SHA256518963d37d1e325457772fb8fa6b6dded8c27ae63faf3208be30610401b75eff
SHA512a0e893ba58a12699e30dd2735194ca8ee83bc20eae1fcae406b3cd26d144c20076b43a6e32a4d5e601044cf01ad5974ff2f0479befeed042fe2562673e098799
-
Filesize
316KB
-
Filesize
316KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
960KB
-
Filesize
48KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
24KB
-
Filesize
28KB
-
Filesize
352KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
68KB
-
Filesize
32KB
-
Filesize
28KB
-
Filesize
24KB
-
Filesize
68KB
-
Filesize
48KB
-
Filesize
960KB