Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12/02/2024, 03:25
General
-
Target
1561edfef7a4549466f790bc4cf86c1ff1cb74604621e63388674ab1ed94e09a.exe
-
Size
23.6MB
-
MD5
676c5efe2dd5efd736d177950899013c
-
SHA1
c7e29bc0f7a209bdadf96911e88a31e05e6f3280
-
SHA256
1561edfef7a4549466f790bc4cf86c1ff1cb74604621e63388674ab1ed94e09a
-
SHA512
94a73545692eee7fba9d1177ec4a6eae6a8fa9670d461ed99c965eaa8a81ce9538a29cfc56bf4575eee00831e47661e777de92897ec815fb7f7cee8213b9dff1
-
SSDEEP
393216:xbbmHFpFgyHkLQFWaTj5++V3RWSbK2UDAV7QedEoe/LzO/qfo/GwgwaenAgw3of:xuHFpf5FUw3RWr2UUIX/LCywuwseANG
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1561edfef7a4549466f790bc4cf86c1ff1cb74604621e63388674ab1ed94e09a.exe"C:\Users\Admin\AppData\Local\Temp\1561edfef7a4549466f790bc4cf86c1ff1cb74604621e63388674ab1ed94e09a.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-K2UEH.tmp\1561edfef7a4549466f790bc4cf86c1ff1cb74604621e63388674ab1ed94e09a.tmp"C:\Users\Admin\AppData\Local\Temp\is-K2UEH.tmp\1561edfef7a4549466f790bc4cf86c1ff1cb74604621e63388674ab1ed94e09a.tmp" /SL5="$400EE,23761289,788480,C:\Users\Admin\AppData\Local\Temp\1561edfef7a4549466f790bc4cf86c1ff1cb74604621e63388674ab1ed94e09a.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
MD5e5c83fa37a5691f28fdba82cd48971bc
SHA1fd4377f87405a70e1bc28020e8029564d9fe54b5
SHA256fa8b5186285e842910350f478366e0e28386c4aa762d8869e1e32282fd9dd5e9
SHA512138d46e77f2f322527764a424b052586255330076808fd649e4d501b701cf455405e0b3913d3ca6b71d5e5f67f3599b6640cdb73ae90997eee3baed64ed3686e
-
Filesize
824KB
-
Filesize
824KB
-
Filesize
4KB
-
Filesize
2.9MB
-
Filesize
4KB