Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 00:33
General
-
Target
9a52f4ca0127690ff937af1a12757e96.exe
-
Size
82KB
-
MD5
9a52f4ca0127690ff937af1a12757e96
-
SHA1
435b9ec1f7ca25df7cb949ba29070096c36902ef
-
SHA256
46343996d5014045126f327d151e45435c7e8d52dac8112dc8b3a5abbdf91ba3
-
SHA512
92181fcddac25979a70cf1f6e54a9f71eb66822bb51831dcf063db0208ba9dc71c62531efbb582a09678a8f8ddad51ea33daf9704aa2f6229e569991936766a7
-
SSDEEP
1536:nca4dnqwZB0KYbLpgiCBJPetX+LoZY0bkPf1Ttd5hYue+wd/eVNWdxRyFVZcDd9l:nca4dnV30KYbLpgiCBu+LYY0bkPZ5hYb
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exe"C:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exeC:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD50a3caefd7e7ab432c2bf3601f62e2378
SHA13fbccb04ac2f192b5bc80ffef4965880ec085ecd
SHA2566a141d96f713f45c681d40ed67bc0711c12a1a641854234b84ed0aa7a98a6158
SHA512d0594eaeb65d4a1eb4b313ebf656198675c6df08159d3e8f570356032aaed552978a866083eef2536f0e66e731c0f743ddd77c7fc8b03ba8f04cf72954fac8a6
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB