Analysis
-
max time kernel
150s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31/12/2023, 14:09
General
-
Target
393ff89b85ab8834cb666a73e1e0f3a3.exe
-
Size
82KB
-
MD5
393ff89b85ab8834cb666a73e1e0f3a3
-
SHA1
c76fd861525fbdebe8f5bf88c92a28d7816263be
-
SHA256
6f2d276808779db7d392114c36b7961f889388b2e3bcd6cd03e5593b40814c0d
-
SHA512
3a784fed217c5327dbc0a3994aa4645997c797c98a9402bca70ed227a271281eea0ddbca518bd9f47b736637a795b0a74b3f319c58c124b538722c371f1cddb4
-
SSDEEP
1536:0DUTSTSEuek3Oi7INqYXhMzzHma28CUT21dQou4MmF9sZAMHv:0z+b3Ot9ux2ZHqk9sZF
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\393ff89b85ab8834cb666a73e1e0f3a3.exe"C:\Users\Admin\AppData\Local\Temp\393ff89b85ab8834cb666a73e1e0f3a3.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\393ff89b85ab8834cb666a73e1e0f3a3.exeC:\Users\Admin\AppData\Local\Temp\393ff89b85ab8834cb666a73e1e0f3a3.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5cc0d705961876391242aaa4c18f661fa
SHA162f3c5006bf7221adfdb2b820f7b322c6f6c8912
SHA256c1d95e17e6300a939e4885b66186b6aa7bb22456ad2d59958069a59eee13aefd
SHA5122c518ba7420627a4afcfa2f51c5290f8744db2d04ec565d7beb32bf937aefc12f2c180e7d27a942fad0ec92b7a316e263fcaa906014cb052ee8adabc9345201c
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB