Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-01-2024 17:54
Static task
static1
Behavioral task
behavioral1
Sample
75252ed3edcacd50236c6d9e961f898f.exe
Resource
win7-20231215-en
General
-
Target
75252ed3edcacd50236c6d9e961f898f.exe
-
Size
1.9MB
-
MD5
75252ed3edcacd50236c6d9e961f898f
-
SHA1
efef972a8f54fa5d42ca2d622fb94f4d8747af34
-
SHA256
54fff92b7ec716bea89b872bb2eca31d8367cd50786bcada4b4464f9dfcb4e0b
-
SHA512
f03eae8e273f4775482e1949e51f5a231e3b63a9e09a6945a0467210990f89d517375808b4dcbfa4ceac450294de054a780aef04f7de5d88743caa2895fa770b
-
SSDEEP
24576:N2oo60HPdt+1CRiY2eOBvcj3u10dwZK/QO1TUUZx9BulEO9RK0u+39IQoOLyUFF/:Qoa1taC070d/QAUYMlp9RKc3WQoOLvF/
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 2976 D1B.tmp -
Executes dropped EXE 1 IoCs
pid Process 2976 D1B.tmp -
Loads dropped DLL 1 IoCs
pid Process 2500 75252ed3edcacd50236c6d9e961f898f.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2500 wrote to memory of 2976 2500 75252ed3edcacd50236c6d9e961f898f.exe 28 PID 2500 wrote to memory of 2976 2500 75252ed3edcacd50236c6d9e961f898f.exe 28 PID 2500 wrote to memory of 2976 2500 75252ed3edcacd50236c6d9e961f898f.exe 28 PID 2500 wrote to memory of 2976 2500 75252ed3edcacd50236c6d9e961f898f.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\75252ed3edcacd50236c6d9e961f898f.exe"C:\Users\Admin\AppData\Local\Temp\75252ed3edcacd50236c6d9e961f898f.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2500 -
C:\Users\Admin\AppData\Local\Temp\D1B.tmp"C:\Users\Admin\AppData\Local\Temp\D1B.tmp" --splashC:\Users\Admin\AppData\Local\Temp\75252ed3edcacd50236c6d9e961f898f.exe 39BB70D3A8B61193A2CEC1F2A914F90D6A2FA87EFA8EDB2E777229DC667512C0377065FA2F9D4D9E256ACCB94CFEF451F5B78D678B56B5CA3346A97CFC8D38692⤵
- Deletes itself
- Executes dropped EXE
PID:2976
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
MD59d2913b5b7f78b1b1f7f964af7a2677d
SHA1c72c39d8913d6dc4c2d070ef91e3e5289bf62e64
SHA256de47f161ffe31ecbce5ec157a608f148c50d5192d78eb786e195a799ad93b835
SHA512161c5453f8810d177f132cf16de43286b804f2424fa9983a57e851a743ae1c6b537f05d0ba60c1c7192edd5492f048dd8f4e7136ec7fda63a0fc0c3638731c6a
-
Filesize
1.8MB
MD5a6b77ffe36f021f5a295d3ef12b91667
SHA104b1641588a0c3cdf0610ff2c1bf0b0c1eb23a89
SHA25664d5079b70ce27441a47d826ac06399f436f52db2baa00706f6a516612985827
SHA512b6c5af0e1f3184d5c4845c535dafbe2e0cbbbe84ef5ce7cc2ef67133abb75093ae3d5edbedd780582a0c46f2b4814b9c7357251b784086899ef3bd0a191ca190