Analysis
-
max time kernel
143s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
06-01-2024 14:16
General
-
Target
4670d6b9b0f0412c21abe07ea724392f.exe
-
Size
1.5MB
-
MD5
4670d6b9b0f0412c21abe07ea724392f
-
SHA1
d30ba2312370ce1f55ec9852f056cb97db3601bc
-
SHA256
b97153fd89467715cb47ea6c9b396a60e96ce7d55ab55ce67a8b32bb8f8c9ce5
-
SHA512
f60f27dc791a816ce6bad3860e2b3ed2e71c72457c5b5cd8874aecde2307183dfbee5b66ba0cbefc4981d61cda90c2a5bcfe29df4868221d420ee777dc0e6425
-
SSDEEP
24576:mJDj7qZhCJWyBZQZogNYY/JNkmwVb2tiM+Rz9cyPTjJW:mJDYyjuoK/kj8iZ59cCx
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4670d6b9b0f0412c21abe07ea724392f.exe"C:\Users\Admin\AppData\Local\Temp\4670d6b9b0f0412c21abe07ea724392f.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4670d6b9b0f0412c21abe07ea724392f.exeC:\Users\Admin\AppData\Local\Temp\4670d6b9b0f0412c21abe07ea724392f.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
2.2MB
-
Filesize
4.9MB
-
Filesize
2.2MB
-
Filesize
2.1MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
2.2MB