Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
23/01/2024, 22:30
General
-
Target
70b9b6fc87be51bc39a7202031a1357f.exe
-
Size
224KB
-
MD5
70b9b6fc87be51bc39a7202031a1357f
-
SHA1
e3bceaf4c2fcfd3080f5428c00adf6950f547d35
-
SHA256
8061882d7c9ac3d50b29058413590dadb92969619e16dc95b4a614036df71c28
-
SHA512
bd7f39af7bfb8bcd39c84515b6ad2e6ec589e4122feaa39f97dc46ffab40a377ea7f6c9c9c2567df8e5dc6ef40af58b42c9665734d1cce6033e28a3b3b68fa7e
-
SSDEEP
3072:+fbA7uidA7AyemWvik8STpUpbQ47+CcfIyZ+cjLtHKfI:Tdw3Wi2T2tPPEZzJHt
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\70b9b6fc87be51bc39a7202031a1357f.exe"C:\Users\Admin\AppData\Local\Temp\70b9b6fc87be51bc39a7202031a1357f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\WinDDK\WinDDK.exeC:\WinDDK\WinDDK.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224KB
MD56dbaa947c2f9f9d5890a34bc33776fa8
SHA136370c4ccfa8711366ed1a3fa9fbde05c4fcdef5
SHA256d03b232d06ebf763a03c3c0a9fdf438148a5fa5eaa940466a7c049d5ddb4c587
SHA5121c2147c4eaf04adadc75fde6f4e994eeb3e338c3339e2fd74c177c2383dadd2a8c1980b77834f205911c19c2ee52b15cc1672beaa762ce3afff0bde7d70d9e78
-
Filesize
8KB
MD5396566faf2c8dd9ba6837b19c36e41a0
SHA1eeb42cf96d1525e8db40685d923ba83bed035aed
SHA25605e17d01b2cb46722746ed61a72d37668e669896f94a27daee40df0669f55b5d
SHA512b41d8dbb524f6cbff8d800a306d9683d1091d281e67c05bba049f201c7c982d1a04bba15eac48c147b221cc0e580efaa4ef2717610b0991bffd30883e8b4b7eb