Analysis
-
max time kernel
139s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
14-02-2024 00:33
General
-
Target
9a52f4ca0127690ff937af1a12757e96.exe
-
Size
82KB
-
MD5
9a52f4ca0127690ff937af1a12757e96
-
SHA1
435b9ec1f7ca25df7cb949ba29070096c36902ef
-
SHA256
46343996d5014045126f327d151e45435c7e8d52dac8112dc8b3a5abbdf91ba3
-
SHA512
92181fcddac25979a70cf1f6e54a9f71eb66822bb51831dcf063db0208ba9dc71c62531efbb582a09678a8f8ddad51ea33daf9704aa2f6229e569991936766a7
-
SSDEEP
1536:nca4dnqwZB0KYbLpgiCBJPetX+LoZY0bkPf1Ttd5hYue+wd/eVNWdxRyFVZcDd9l:nca4dnV30KYbLpgiCBu+LYY0bkPZ5hYb
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exe"C:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exeC:\Users\Admin\AppData\Local\Temp\9a52f4ca0127690ff937af1a12757e96.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD518452ad9feb9c5f558406fecec4e06ad
SHA179f53666e40098d5e3b2a1bf4372b9d012ec962f
SHA256ed988253038f436805fabc8d7a237755e72fda334185af49d11b86e17d63aac1
SHA512ff287f87d8362d668bd7e7151e82aaaab2dc6742249fdb0679337b901d599fa2268ef86ada101213a4ed4ac9cd2434d1cd746c82c2fe5aeb2d6e97a1d853e514
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB