Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
24/02/2024, 13:10
General
-
Target
a1ef8e66988a312b252792f4c7075d2c.exe
-
Size
82KB
-
MD5
a1ef8e66988a312b252792f4c7075d2c
-
SHA1
181d46fd203e2db8bbabc7258f2c44a41a06a883
-
SHA256
e770762579b5522c5116efc3db5c340da21209dadd97deefc0ed470d543c808d
-
SHA512
ec94d53d2d6e23f74c423ba5b50927ef3a49a5a47e59dd94ecbea0b11f31c3f0d5a235b1ae3e6546353295bca8db23c00d48350993fd6b657640dfa77a981a62
-
SSDEEP
1536:qwiZpRWhkQJCfAaNaQlnr1zldd4I7Q90+NvETyMTbBP6FNi:xqplhfvkcnrksQ9Pp0b16Fc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a1ef8e66988a312b252792f4c7075d2c.exe"C:\Users\Admin\AppData\Local\Temp\a1ef8e66988a312b252792f4c7075d2c.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\a1ef8e66988a312b252792f4c7075d2c.exeC:\Users\Admin\AppData\Local\Temp\a1ef8e66988a312b252792f4c7075d2c.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5eabcf6a3796532f7a88ffdd91a5c221f
SHA1d96391cb011002fe849c0d357efcda550e75f086
SHA2563989ad89e2526850929c291186b94976d6a0cad5d50ff69948998f6b5e01b7d6
SHA512db5b6b48f7ff9431cc753958241247690bb9ba0bd1f5139d63223ad31d4d3afaa17c069c85ecd349534a2adc261af188485d7ade3ad22ebfc03243898e696f2a
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB