Analysis
-
max time kernel
1s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
01/01/2024, 01:43
General
-
Target
3b935cb31b127c2bc8796768d4b7cdf4.exe
-
Size
133KB
-
MD5
3b935cb31b127c2bc8796768d4b7cdf4
-
SHA1
2ab89c1654634c4a74ba7013e8acdaab312d177d
-
SHA256
f5306041db24dd2a18dedae5ccb36216e1dba583393fd9a4f16e5ddb6d04f651
-
SHA512
9ef6071592698e18db713db038ae0dd74e15d7e9faa4aa80b2ec06bcdb88177c6aba4936bceab2fb81e088ece09cfbba1aa09d3685d90b54dd2d13734e69b39d
-
SSDEEP
3072:lzLJ9UP+QyX3JF83QkpXA3qgn/a/y+goutgDQ:ln/Ubw3JF8AkpDJH6gDQ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b935cb31b127c2bc8796768d4b7cdf4.exe"C:\Users\Admin\AppData\Local\Temp\3b935cb31b127c2bc8796768d4b7cdf4.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3b935cb31b127c2bc8796768d4b7cdf4.exeC:\Users\Admin\AppData\Local\Temp\3b935cb31b127c2bc8796768d4b7cdf4.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
132KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
132KB
-
Filesize
124KB
-
Filesize
124KB