Analysis
-
max time kernel
151s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-es -
resource tags
-
submitted
19/01/2024, 15:03
General
-
Target
CMND576758678/5675675878/5343466456.exe
-
Size
15.3MB
-
MD5
bd563c928a86cd24eb13ecf3c099314f
-
SHA1
587dee8a9b6d66a385a77f3094a033b8a0f2617c
-
SHA256
db14560502edc73d6e96fec0d151791b92c15eace80a1ba90d17302d3ed37998
-
SHA512
e36faf4c6d72d15600d4c5c28c4e65b74f70599f337506fca5fd867966dc713f53e57ec1e27e915992405adfaa72d609a03343d24e5883a7ed27ff44ff7fc238
-
SSDEEP
49152:6RaNf51YutbFrxmfg5kAqBmIV1lp0RdiAutGuE5ShpUPNE0v2d9KUj1LeOAOuHIn:6Rax51Yu
Score
7/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CMND576758678\5675675878\5343466456.exe"C:\Users\Admin\AppData\Local\Temp\CMND576758678\5675675878\5343466456.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\windows\SysWOW64\grpconv.exeC:\windows\syswow64\grpconv.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
16.4MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
4KB
-
Filesize
15.3MB
-
Filesize
4KB
-
Filesize
15.3MB
-
Filesize
15.3MB