Analysis
-
max time kernel
2s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
31/12/2023, 04:53
General
-
Target
28f2ec2a7e8ccc1e0429227499c15644.exe
-
Size
5.1MB
-
MD5
28f2ec2a7e8ccc1e0429227499c15644
-
SHA1
99e183d6efb0232b13d1cead9ac44cc25a220c0d
-
SHA256
05ade7c9ec417adddc7adad841880661a88dc63ba6efa464f9b4453329bb9bb8
-
SHA512
deac1793b02b0f80fd08710b497d405763e28f78f4a9786ae7aab927cf8836625f405e3051c08cad6daf79aa0ebbe048e056c57de5317ef8c706c4fed5480515
-
SSDEEP
49152:Q6nZ1EAF1uIXFa7/rkGFXYifz7R2ySQZHttMay3rClb/nvTZG5uRqh0gI3QxNm/N:nnbaYw6ySsE3rClznvOuScAfIqm3
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\28f2ec2a7e8ccc1e0429227499c15644.exe"C:\Users\Admin\AppData\Local\Temp\28f2ec2a7e8ccc1e0429227499c15644.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\28f2ec2a7e8ccc1e0429227499c15644.exeC:\Users\Admin\AppData\Local\Temp\28f2ec2a7e8ccc1e0429227499c15644.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
9.6MB
-
Filesize
2.4MB
-
Filesize
9.6MB
-
Filesize
9.6MB