Analysis
-
max time kernel
155s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31/12/2023, 14:14
General
-
Target
396aee14e3f13c9be4c27dac32057970.exe
-
Size
162KB
-
MD5
396aee14e3f13c9be4c27dac32057970
-
SHA1
64ff4c92aacd9a510202e32da2de05038c6b2120
-
SHA256
930f3f1229231e45a73191d82ce6f568b6022f4fe92b5faf9a300e23d6feb6e8
-
SHA512
e012869e1fdb203c789569515f7359ea1cd6c12702ebe5ac10588c6d6ab865cab296687717c19afc4a89643a1db629ed3ca10365a4bc5436176a50e26d3721e0
-
SSDEEP
3072:zepaVVtpnNYw9NM22vWXmutt1TkuAERAF3PVU6by/fH/vZycn/:qpaV5ew0K2ut7TkF1+tH/vZF
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\396aee14e3f13c9be4c27dac32057970.exe"C:\Users\Admin\AppData\Local\Temp\396aee14e3f13c9be4c27dac32057970.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\396aee14e3f13c9be4c27dac32057970.exeC:\Users\Admin\AppData\Local\Temp\396aee14e3f13c9be4c27dac32057970.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
162KB
MD5e3a47cd26cd366d5ac1988e8835eb819
SHA1f3657c5fb541a3224bae42fd438ae53bf6435e20
SHA2568d7ffd712cf67e22cf0954a47797e9dd7fe9e5c98d59de30f081121432eb686c
SHA512bd3879183ea9dcc524cf20a176fb82e6987bd74beeb707186b39aeffaecf4723b14e70fd6a224af0aeeceb88cce8ef833e0a10bfa4c6b7bef13f8c39e88eee14
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
108KB