Analysis
-
max time kernel
91s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
03-02-2024 23:24
General
-
Target
8da18d6ce7026616c63ecc674cfc7957.exe
-
Size
84KB
-
MD5
8da18d6ce7026616c63ecc674cfc7957
-
SHA1
ce96825bce7256172c1d763429dfeca11e8895fb
-
SHA256
d2daefac125d78361be2e1da619da97c58d064b7777d42d749b3e253eb23127c
-
SHA512
3b4ddee5784936d212dda63c13e559db20b3a67ee1e4438f757a6ae61b87ea1821cab6069ca691b42a99dfa8746be33eb50906e59a764b5ec323371c1dd342af
-
SSDEEP
1536:nr/681p1qba7FkYRvaCdHFl+bV2eCJbpoD0oYk/nub/OGr:rS8X1QahkY5FlUV23N6PCOg
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8da18d6ce7026616c63ecc674cfc7957.exe"C:\Users\Admin\AppData\Local\Temp\8da18d6ce7026616c63ecc674cfc7957.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8da18d6ce7026616c63ecc674cfc7957.exeC:\Users\Admin\AppData\Local\Temp\8da18d6ce7026616c63ecc674cfc7957.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD50844c467e6b5b81a7a07417653597de3
SHA12b74d8b13a488d4c91bf1a79eedfd8a1228b630b
SHA25687a96e214c439faa7ab607509fce0027627004bcf1ac68bebcfe3a8f8c3d7f3d
SHA512fa0d522f4cbc6d91885f5de03ac3ebe77b8c7066b866dc8901cc8133fa1fa755a3cbb909fee368d5e1b1f5b3bd7665e516580f7eaf8866c5fbbe3a87cd2128bd
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB