Analysis
-
max time kernel
92s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
04-02-2024 00:28
General
-
Target
8dc1c1d7b2e3f31e6cbcab3883ba38af.exe
-
Size
82KB
-
MD5
8dc1c1d7b2e3f31e6cbcab3883ba38af
-
SHA1
c4cb18d45732acf24cd49d5cb8c5f592b5b5ff53
-
SHA256
063eb0a6fc5498eab3993ad56c2b59b6e1b60b31983cb6e8d2fa6bf3a2c634f7
-
SHA512
4b8f74c6d9a22cb7ffc6cd3115f6db4bb4d15004b552858f02a248da9bd1a60a42a4e9ab12ba5b4eb137b6e8ddb532f2905010c9238769857579d3aa8f99398e
-
SSDEEP
1536:nIoHbI7TpgzE/23GIYxkw2c8GE2arqU1t34ke7ce:IAbMpE13GDn8Gmdj4keoe
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8dc1c1d7b2e3f31e6cbcab3883ba38af.exe"C:\Users\Admin\AppData\Local\Temp\8dc1c1d7b2e3f31e6cbcab3883ba38af.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8dc1c1d7b2e3f31e6cbcab3883ba38af.exeC:\Users\Admin\AppData\Local\Temp\8dc1c1d7b2e3f31e6cbcab3883ba38af.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD584e6c09baa8338818cfc0700dcd1ee4d
SHA14fa8eca5c1a372b5b5d5b6d4a58386d73049e436
SHA2566aeec2cb29f63478218a2a5b94d529acc65abca3a2076025b768cc72c4c82f3a
SHA5124ffffb237ed0f7e887c13f319a6577ba768578e7d9bd50ad31d5fa1d0179cf9e9cf79e38d468fdaf2c9cf0e2eb845d1aa588590cac133575838545b3d1a3b703
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB