Analysis
-
max time kernel
119s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
06/01/2024, 02:24
General
-
Target
41fbbf5fca21d7c9a1a2e4154780851a.exe
-
Size
82KB
-
MD5
41fbbf5fca21d7c9a1a2e4154780851a
-
SHA1
ec3d7a65da21071593d76f56e7072ce7ea1cbb5e
-
SHA256
31272cf8eec45f2152de2257c4ad33cb7cc993d2232292e3d4c78ed6b30ef5fd
-
SHA512
3bd350f60281f17e44639629d682e4d2e2ca88abf81075e93404500d37c455e35135e7825383c837a5961b6d1b72cdde7476e909c5c6faa2917f74c976e5c443
-
SSDEEP
1536:1FLzIUNE3cpumKR75jFkAz96K/PUM562t8lA1N9DIEkL0RDCy2K:1F4UNE3cpxQBoKU0XtIMN9cEcy2K
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exe"C:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exeC:\Users\Admin\AppData\Local\Temp\41fbbf5fca21d7c9a1a2e4154780851a.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5a4042d3516e27c95cb20af529188c949
SHA1b8f60323fe4661d4ea9247262d5c43e0c79e562a
SHA25686b662442a7a3c3db28781629950c2d5520c06e61f6c373f751af8f60a98e92d
SHA5125d46f208bdf4b384fd6f7f81f0f14b146bd1cb95e77b8f8de45e57ead080bea7875399e27ad64f5a10a7bbb0bd5bdb503d47f6993e783c41bace5b291b55ff8a
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB