Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/03/2024, 19:56

General

  • Target

    45acab6654211e8cd37f0d69e01b6468e64438fd39f23a5212e140051b043b1a.exe

  • Size

    71KB

  • MD5

    b4ada32b10cc4d1bc8ad51323809fa82

  • SHA1

    80ea1d77d753bce44a087b4af15a05a618b127fd

  • SHA256

    45acab6654211e8cd37f0d69e01b6468e64438fd39f23a5212e140051b043b1a

  • SHA512

    9b33d03936706c21a4c274b1553265401030e4fa2b5bbc6ab2b00af9459b21f9c6b66f34493aa5f0372f914ad48d14dc2929fdb8487fd0826424cb31fa2bdce2

  • SSDEEP

    1536:1HIVaam4XFsej94BpTjtkP0pzHrlFAREEP7VtmmH6O+np:qVaamMsA9CtkMpzLHHEjqmH6O+p

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\45acab6654211e8cd37f0d69e01b6468e64438fd39f23a5212e140051b043b1a.exe
    "C:\Users\Admin\AppData\Local\Temp\45acab6654211e8cd37f0d69e01b6468e64438fd39f23a5212e140051b043b1a.exe"
    1⤵
    • Drops file in System32 directory
    PID:3748
    • C:\Windows\SysWOW64\eacmareav.exe
      "C:\Windows\SysWOW64\eacmareav.exe"
      2⤵
      • Executes dropped EXE
      PID:4596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\eacmareav.exe

    Filesize

    68KB

    MD5

    e9dfe78dadff5542170d61d16cd5065a

    SHA1

    e6d53ae1b9368b80a31596d8c90c1a407c81ee35

    SHA256

    383923b3593fd61e720ab8b30aaa4f88d150146ede9d8ec04c3a46d7c86e735e

    SHA512

    c20264af27a550ced5c2fa59f667cc9c9abc3d02a0198ca422b967780abd67aa8e2fae2d568ebae15bf3b5432ed38cc9c9f5f282550fb666c10780022a6d208a

  • memory/3748-1-0x0000000077BF2000-0x0000000077BF3000-memory.dmp

    Filesize

    4KB

  • memory/3748-4-0x0000000000400000-0x0000000000403000-memory.dmp

    Filesize

    12KB