Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
10/01/2024, 02:41
General
-
Target
4f5d36e8c32d6be4ca9418d75179235a.exe
-
Size
84KB
-
MD5
4f5d36e8c32d6be4ca9418d75179235a
-
SHA1
526fd6aec79c92d2ec7c815418e1905324714478
-
SHA256
7f577b5fdb4c53cf7095d6173d3bffcd8e87f6cbc1d7c38709118e06b131ca9f
-
SHA512
f1d7bc5e40b0956fe327866786e928c25aa5048233b09492da12ad38d1e7b0f483962a552f92661ace884824d56fc7ea4c12993acbc749b6aa00f044f589a00b
-
SSDEEP
1536:ZkDR97bXLU9KRX0gvmqCvrFquF6lgXM7g3Nw/HEu9LPkf9U/GxXxZSaf:Sn3XgkREg1SrFquF6f7INu5LMBZSK
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4f5d36e8c32d6be4ca9418d75179235a.exeC:\Users\Admin\AppData\Local\Temp\4f5d36e8c32d6be4ca9418d75179235a.exe1⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
C:\Users\Admin\AppData\Local\Temp\4f5d36e8c32d6be4ca9418d75179235a.exe"C:\Users\Admin\AppData\Local\Temp\4f5d36e8c32d6be4ca9418d75179235a.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB