Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
01/01/2024, 09:55
General
-
Target
3c8c377b9062130ecf22c112b3e8c2d9.exe
-
Size
1.5MB
-
MD5
3c8c377b9062130ecf22c112b3e8c2d9
-
SHA1
08e65bce7afc1da6a537760dfb029ce9dfac23e5
-
SHA256
261e3a739619e4c46dc6f1eebf87d27671e526af82947c83e054514aff5398b6
-
SHA512
f479e0a04ff57d97f35dd9f4f71dbe7020238a7177572327fa607480b735c653303d25f112469ffe1d52157a2398735307486b255fb6cf6d47e30a5aabe60388
-
SSDEEP
49152:5av7Z0w3n0qiUACeICv/81ALVwHcaHMTdinXBgJ:Qv7Z0w30qIH/fLSHckcURgJ
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\is-THK4S.tmp\3c8c377b9062130ecf22c112b3e8c2d9.tmp"C:\Users\Admin\AppData\Local\Temp\is-THK4S.tmp\3c8c377b9062130ecf22c112b3e8c2d9.tmp" /SL5="$5014E,1309545,54272,C:\Users\Admin\AppData\Local\Temp\3c8c377b9062130ecf22c112b3e8c2d9.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Users\Admin\AppData\Local\Temp\3c8c377b9062130ecf22c112b3e8c2d9.exe"C:\Users\Admin\AppData\Local\Temp\3c8c377b9062130ecf22c112b3e8c2d9.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
245B
MD5a3bb1bf0bc3e47cb2720a17e717a6403
SHA1407c470653d2cf40e23961a21b734c9a40a91462
SHA2567d2007bd568752c13cdfafbb1ead0d24c52cb519d960539ad8d0ae6cc3636504
SHA512e2c17de0e9c05bb0d4e17bd8aaba109f6dc4e9e93fec846433418aede1ecc20f748f59b48aefe5bdc0493fa901bf81bda00c6693b33e2948c9ca230b178020cd
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
4KB
-
Filesize
752KB
-
Filesize
4KB