Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-01-2024 07:03
General
-
Target
7409394d083b7d32b8cb4b666afea0e7.exe
-
Size
56KB
-
MD5
7409394d083b7d32b8cb4b666afea0e7
-
SHA1
52c2a2af66206568c3f328a6c4889ca0f7125eb4
-
SHA256
beeb7ad74a65ea26f610573216e7c6c9c817abc350e6ca7aafedc264f88e33e3
-
SHA512
102fd81ff9d79b67951a2adaede6731e38c3a820ff4dc6cedb989f010d5e983ec2e852838d7e21d78f990519cf59b1c6e94b5acd9bf031a7fbc904d3988343a7
-
SSDEEP
768:W2tLILuITEgXVwp0kIqj4A0tm4iqL2iU1veGDtspAORabJ0cBAZOibjDXNG+TRgF:bIqnSw+kIXAyCXOpEJ7BOrDTTmS2
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7409394d083b7d32b8cb4b666afea0e7.exe"C:\Users\Admin\AppData\Local\Temp\7409394d083b7d32b8cb4b666afea0e7.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7409394d083b7d32b8cb4b666afea0e7.exeC:\Users\Admin\AppData\Local\Temp\7409394d083b7d32b8cb4b666afea0e7.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD56e8e2a2f8c6f49e64527305047105b93
SHA1ad641c1d1019d25d781458e756bcd290fee678f3
SHA256061b58c904812719ffe7bfb0434811db06c14d2713c734dd5cd664c0295f09a4
SHA512a34afb3d5ab8ffc54a7d5570177d79933e7a02ac1b1ffd84d2075c284425760830ca51ecf22df51631509febba931ee4fbb04c7d3f009baf5bea0c829945f9ae
-
Filesize
232KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
108KB