Analysis
-
max time kernel
148s -
max time network
84s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
05-01-2024 07:45
General
-
Target
4323fa4d2c88efdd640cbfba3f3ad758.exe
-
Size
1.3MB
-
MD5
4323fa4d2c88efdd640cbfba3f3ad758
-
SHA1
c989d1e9d136ca6a50d3e779016800567f31e063
-
SHA256
cab81b92b10159c61673842d780a4e6bdfb0e1272bf851b61ee25c249744bf25
-
SHA512
e57e8298cee8b2487bdd7d83ed7865f69d4f77da3c39d4019817cca3bef92fa61fc95d542694c733fd522a469ed9f0b406dc321faea1159bf5f7674aca1f899c
-
SSDEEP
24576:lBI6r1/099WPBISyiPnY+sdXpkmn5/Yxlu1lH5uqjTyikBzmWO:pZ0LNgPap3pYxlufQ6ubBzmf
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4323fa4d2c88efdd640cbfba3f3ad758.exe"C:\Users\Admin\AppData\Local\Temp\4323fa4d2c88efdd640cbfba3f3ad758.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4323fa4d2c88efdd640cbfba3f3ad758.exeC:\Users\Admin\AppData\Local\Temp\4323fa4d2c88efdd640cbfba3f3ad758.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19KB
MD5210bc0e57a6c69a3e00deca7c7234521
SHA1f7da3f07ec1b90a10688a352b1651c53aaf0cb59
SHA2569c1a9849b3d03eb8d188382f437eda7e40231474e8757e26be53da8eba9241fe
SHA5125792657b4c2958b6e6e56c268e8b8c0f8bc03bf2c89d29ff8cb32e79ca4838f6895d7dd8b058107c595169fb06d31999b13b7fb9242efdb6d93b60cb787110a1
-
Filesize
2.2MB
-
Filesize
4.9MB
-
Filesize
2.1MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
2.2MB