Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/01/2024, 22:17
General
-
Target
78879c1b563464678d1d44313b067a83.exe
-
Size
56KB
-
MD5
78879c1b563464678d1d44313b067a83
-
SHA1
e3d196d56e7473f32b584840ed69386f68437e3c
-
SHA256
e4ce3f8124297828c263681abbd75c218a2e226d43c806ac9c2fdf696f0a0eed
-
SHA512
53b9c548fca27422967144cf1df466ab757ce817827be10a055cea1c31dcfe06c30662872ff3f16937135bd3853d153a2f3de20ffa3976facd42165e90dec55f
-
SSDEEP
1536:7O7Icu3cIWEao8NXGgMvU8/oH+tzytAQ+Ali5D:aJscIWXNWgMr/FwAL
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\78879c1b563464678d1d44313b067a83.exe"C:\Users\Admin\AppData\Local\Temp\78879c1b563464678d1d44313b067a83.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\78879c1b563464678d1d44313b067a83.exeC:\Users\Admin\AppData\Local\Temp\78879c1b563464678d1d44313b067a83.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5722ab4cf7a9199cdcd6651764f76a3fb
SHA17a3757242b3107fbc94cd6f8a1ce23cf2ae2fc7c
SHA256b8b1381f68064b111ab8e1067f34fa085295e75f346446147c722237b6ecea00
SHA512a7bafa6e4d88a472fabec6ed7ac4d687ad79151a50d8f6a35065c8e49d95c01bcebf08247c16fddc15af0e01862debb5b9109ac181652a79f2215bb69a9c12cd
-
Filesize
232KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
232KB