Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
04/01/2024, 09:43
General
-
Target
40865e33461e2f844b24ab8a761ba092.exe
-
Size
82KB
-
MD5
40865e33461e2f844b24ab8a761ba092
-
SHA1
56490cc23e8835b32206a648aecea3962811dcf6
-
SHA256
ed65d3010599fb4c27bb0a256590e4afbd4bc061d5d35ec4f6142ef71424447d
-
SHA512
d5a3f74aed41e443fe3d09d0a53ce8b9c12973c46062e6599e47fd64c1f72be147cb63da4753ac9e88ee826044a0849121aab1b0e521bbde22abaa195741623c
-
SSDEEP
1536:7LtzWs3QR9pjNKALoHS3EcNgnaAcONDtZfu+K4hg8tgPsy8b:QlDpj9oHkEcaaARDXW+fgygPsyS
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\40865e33461e2f844b24ab8a761ba092.exe"C:\Users\Admin\AppData\Local\Temp\40865e33461e2f844b24ab8a761ba092.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\40865e33461e2f844b24ab8a761ba092.exeC:\Users\Admin\AppData\Local\Temp\40865e33461e2f844b24ab8a761ba092.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB