Analysis
-
max time kernel
135s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
15-01-2024 04:11
General
-
Target
5c19c91b94f61edfb99cf705b73fff77.exe
-
Size
82KB
-
MD5
5c19c91b94f61edfb99cf705b73fff77
-
SHA1
533fe0d6e7f79454001905ad629fdd97f10f7fe3
-
SHA256
9908ce46fe70696327ed15de07a01808fe69bf703f0eb2ff35a02ddf3f60f930
-
SHA512
963a89f3b8ba9316c18f27a40d54b9c2a404509dd3bc95d6f960970a999ccc0297518272dc727a44e5822f962216597544d15af438053a330f5927285a575ba5
-
SSDEEP
1536:A9Du3T+3dao60GmKw708ery4lW+zdPTqEgWiPpbgZex0vvd4QMHPJB:A9u3Eda90GmKDtyX+zd+X6esevn
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c19c91b94f61edfb99cf705b73fff77.exe"C:\Users\Admin\AppData\Local\Temp\5c19c91b94f61edfb99cf705b73fff77.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5c19c91b94f61edfb99cf705b73fff77.exeC:\Users\Admin\AppData\Local\Temp\5c19c91b94f61edfb99cf705b73fff77.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5c84821c1eb78ccde0a8226db6ba9fdf6
SHA1d315cb031743844b96723f54e0f3d50e292ba680
SHA2566ab83d78bf06ce27b0f89ef58e4e96c156a6ee05a00f9f7e0c6f163f9eacfa79
SHA5121ff262b4e97e836be023a4b956330d1b5ceaee60dcc1ab9f9f666068ff476531852bd1a2b4a7f6f2f1afe67ba208914ee1f29196d4c7f3cb9418ec17bf70e569
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB