Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06-03-2024 00:13
General
-
Target
b36657ac328849497aa1afffbd01c21374c8bc7ac821ecc843c68e91e74998a4.exe
-
Size
448KB
-
MD5
e786e9c00c9461f5b2f418fcc7bc2dfb
-
SHA1
91555166f985f321bf2ee0775fc9dad8c3f24626
-
SHA256
b36657ac328849497aa1afffbd01c21374c8bc7ac821ecc843c68e91e74998a4
-
SHA512
fb146331fa55679b850d3899413e84376fce6d4d03ddcef8e3623f070836915c27b3ce88c0c88cf4a87e06e0b18bda2bde1320db51bf16c297ebfcd109f4ca74
-
SSDEEP
12288:RyZE1xxolX33HVIq4DOQS7wEqZQ0npM4dl0v5JdmY:8ZE13olX33HVIq4DOQS7wEqZQEM4dmvN
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b36657ac328849497aa1afffbd01c21374c8bc7ac821ecc843c68e91e74998a4.exe"C:\Users\Admin\AppData\Local\Temp\b36657ac328849497aa1afffbd01c21374c8bc7ac821ecc843c68e91e74998a4.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\b36657ac328849497aa1afffbd01c21374c8bc7ac821ecc843c68e91e74998a4.exeC:\Users\Admin\AppData\Local\Temp\b36657ac328849497aa1afffbd01c21374c8bc7ac821ecc843c68e91e74998a4.exe2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
448KB
MD5f1cfbb96656175218c652eabe32e0645
SHA1921f18a67d7ba2680cd2299a257464ff501fd1a7
SHA25600519c87092bec812b33408235638b9bb79a6d21eb8a8e9a12c54f91b6776d97
SHA512cb6bc1a493ab9bce3b2cd25cd1622501104f57031079065cdfb0c2337ffc67ffcfd708ba364e9cd48f53c0c50e2ba388e46490828873ce6856be7e7a0cbe212e
-
Filesize
84KB
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB