Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/03/2024, 18:12
General
-
Target
1b52b10b061c086c4dbf28a8c816c2e840c2e79bbe23b0aa013e3aa988e2516a.exe
-
Size
209KB
-
MD5
050dde1035f70208d5ea4c6121eff941
-
SHA1
724297117bb1b542981e6daab56071c609b99675
-
SHA256
1b52b10b061c086c4dbf28a8c816c2e840c2e79bbe23b0aa013e3aa988e2516a
-
SHA512
2e096e17bf6d49d0571a35a2dd090cf1cb82ed1da0af1dca3506ede5d906e8ef2bd875a3a6629b049b0edeb09837ae61086e204110714ccbed109af17f1db02d
-
SSDEEP
6144:DUbkIOe6/62PqGp+kW0O79IKxLGwE06FtfXp:D/rLp+kWBrxLrdqtfp
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b52b10b061c086c4dbf28a8c816c2e840c2e79bbe23b0aa013e3aa988e2516a.exe"C:\Users\Admin\AppData\Local\Temp\1b52b10b061c086c4dbf28a8c816c2e840c2e79bbe23b0aa013e3aa988e2516a.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1b52b10b061c086c4dbf28a8c816c2e840c2e79bbe23b0aa013e3aa988e2516a.exeC:\Users\Admin\AppData\Local\Temp\1b52b10b061c086c4dbf28a8c816c2e840c2e79bbe23b0aa013e3aa988e2516a.exe2⤵
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
209KB
MD5aa411272e3006b34c4d92b6774d5e3df
SHA13fbdeffad9948e161fcfe740905bf494a182159c
SHA25652a14fe8285bd04ca755bd7fb61a52344f29a56330699d3ac89f64c2f9d3c6c5
SHA51236f2cb168301859425b2d2736aeb3aa1feaf68c838054c5d4a6c2473bfd196730fa96f0adcbe8a64de2a138b0546e1a7212374f777d40843257d60f63eb5b272
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
104KB
-
Filesize
256KB