Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
02-02-2024 18:15
General
-
Target
8a34e819185714cad54d371822584ef6.exe
-
Size
1.5MB
-
MD5
8a34e819185714cad54d371822584ef6
-
SHA1
59209ea86808ae8b843f3e4d18eac67b80b798ce
-
SHA256
d6b1476697e5d450a768e0d9e8f22ff305d96be318c43125b212924657cf5408
-
SHA512
c2cf76be37dffbc7eea0ab030d30128b8cafb80b228ea621325b667a9d43ab598df61107fff0ced92ffb3afdcec1415130aa40b2d4023c7a4ee8c9c5c66a943b
-
SSDEEP
24576:mKl37prtklSKpUcqc1Tjp9QrfkJFO31BaGYUzjaciP2g8+EcaN11M6HW:vtkNdnfyMnsBVYUzmcj+ZOM6H
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8a34e819185714cad54d371822584ef6.exe"C:\Users\Admin\AppData\Local\Temp\8a34e819185714cad54d371822584ef6.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8a34e819185714cad54d371822584ef6.exeC:\Users\Admin\AppData\Local\Temp\8a34e819185714cad54d371822584ef6.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
614KB
MD5d67d5cfd2a4ac75d08732eeef55631a9
SHA1936ad5ac173abd76cd7e73f5b1be99a67c7b18e4
SHA25614c166f3349deb65d492c7d390b8bba13142f17c020bd8d1da0993e84c7c964a
SHA5125a8f08155fcf216ecc906710e3cad973875cdf46a7c64dd864362da7b15ddbc2c7cb09a94508abb7269585fb5ef9d0bffba220d50a94750ff78089a14d53767f
-
Filesize
1.2MB
-
Filesize
4.9MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
4.9MB
-
Filesize
2.2MB
-
Filesize
2.1MB
-
Filesize
2.2MB
-
Filesize
4.9MB