Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11/01/2024, 03:09
General
-
Target
525fa299b7518b873d27bd73ff228654.exe
-
Size
84KB
-
MD5
525fa299b7518b873d27bd73ff228654
-
SHA1
08e01bf5b6fbce3e6867069ed98de7c58c200e11
-
SHA256
b31c97c558c0d95381b48505586f63932611ae579c91d697936d831f025f4fe7
-
SHA512
bf70fb09cd41f84d71ed88cf55fa166e044734f2a8d7a0905a67a33b5a590a9cfe6c67eec69e75fd68e1caddf207bcd585af588f4111ae9d9e8e5cdba417a6f9
-
SSDEEP
1536:l1Sqo9I16esxOrR4KOEasFtF81zWLqGafeSCZ1VW2FU0ouYC12Du:l1SM1m6R4KzaMF8xcnNFU0nDsu
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\525fa299b7518b873d27bd73ff228654.exe"C:\Users\Admin\AppData\Local\Temp\525fa299b7518b873d27bd73ff228654.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\525fa299b7518b873d27bd73ff228654.exeC:\Users\Admin\AppData\Local\Temp\525fa299b7518b873d27bd73ff228654.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD55b0b10258a213406ff095f5f2d20ee8d
SHA1939df046d3a296cd61826640ef920e45b8ec7a89
SHA256bfdbd89549527a1d5c8376706b80a7efa2864152dfb7d9e83200b7e4676551b1
SHA51211c793f4aac03cf23b14f26dbf8f619419b59dcabf12f0c41a91ca378accb7c7439417e6e324e426688292b5e3893360e9d83754d9b2f33d7ea0cd94b7289596
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB