Analysis
-
max time kernel
148s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31/12/2023, 04:26
General
-
Target
281ddee96eac89f5ef71a61effe1b288.exe
-
Size
82KB
-
MD5
281ddee96eac89f5ef71a61effe1b288
-
SHA1
474fe260a92605d438ea0182cb5dde0581cac17c
-
SHA256
439db4a116ccf8e4335e2a9f73bc4216b466466c36c8b60bbe4fc37c0585eda7
-
SHA512
50b6487e2e3c8758fe86a74bbd36d4853db8dd16ebfff6bbc99a60219ab69a551021e597a3032b77d22ae4ed24c6d6e04378944d6b1ac7b54c50714de047cc1a
-
SSDEEP
1536:H761WbbT8SKjKS/0yHl1CyHIByP68Xrk5r0RsvYLwPaOxslDmVS4/Qxq:m1Wbn8SKjKS/0y/IByCQrGrQgJnsQT/R
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\281ddee96eac89f5ef71a61effe1b288.exe"C:\Users\Admin\AppData\Local\Temp\281ddee96eac89f5ef71a61effe1b288.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\281ddee96eac89f5ef71a61effe1b288.exeC:\Users\Admin\AppData\Local\Temp\281ddee96eac89f5ef71a61effe1b288.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5737c27f010149321f88fce82d689923c
SHA11a6f1418437beb986defcbb2ea693d31a3b01152
SHA2563b5cab4e9a3591c5c6df75a60a9433690f5503b3b088be318ec1007930df50c3
SHA51293b513f037d2787b5e4dbb9c2ba94c25e09b5758858fc1821fbc4e901cea82f7235166f8cafb1b4a942b6ba6e8ab8677452f8decb1d645f1a70792844430035f
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB