Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29/01/2024, 04:41
General
-
Target
7eea060d6ef339f349f3df90dd7da07f.exe
-
Size
84KB
-
MD5
7eea060d6ef339f349f3df90dd7da07f
-
SHA1
ce5bfc0cc35b648bbf57f3f7d02d64ca77ad9cb6
-
SHA256
477f1ece0eed3d28b1fdd96ff313b512ef1ab138d3539d8bd770cd9841a27e1b
-
SHA512
0eefcc3626297699955c07af6014e9850211481a5f129c63d16f27eb130fbe720e73dcdc384e90a219dc86e484c113bc60959c40c9d8d8842aa39e4261fece99
-
SSDEEP
1536:AQyhAptXSe01i1TuhX9AiGWo8+io1n5hwCFGZqoaUHOCK0L/L9pZs5r:yhArV01ioME5oRPFbolhLxsF
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7eea060d6ef339f349f3df90dd7da07f.exe"C:\Users\Admin\AppData\Local\Temp\7eea060d6ef339f349f3df90dd7da07f.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7eea060d6ef339f349f3df90dd7da07f.exeC:\Users\Admin\AppData\Local\Temp\7eea060d6ef339f349f3df90dd7da07f.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD53368ffe2e04c2b84bd83b8c544b5fe3a
SHA17f4473305d516a0da3831eee003c4c1d9950ebfa
SHA2562ba02eec312e8c31f56793d556a2407b260fd7fe1e10b9d2348fa85567c4d773
SHA5129ae237c31c1ebbf13675b8c10e0e3c308d2573b791f2fe402a60e02e2c972de32a8a7b09eb1827eb2c7353639308193b71414216002845180a1793faeeb07791
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB