Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06-03-2024 09:01
General
-
Target
b70930543bf11405346954b8e712dcaa.exe
-
Size
82KB
-
MD5
b70930543bf11405346954b8e712dcaa
-
SHA1
2ab315a2d21f377392cf8d9a6d0f91a4064aa846
-
SHA256
a54fc2530240b2142a7e2e0ce67da961869f1d4d32950c4b950457f54baa63ae
-
SHA512
87bf7d53d1004526564e2bc1dddc3c4ea75add72f4f49ed45d26fef679d6f470f12409b2678403b962f3cb8bcc1e20ae600b3801552decef50a0e79cb5b4e124
-
SSDEEP
1536:oYulJijAFuLVj/K+Lh3LAzBdWbA25ARYMD+B8NolEmIVB7N/YCiQLsge3FEc4:B/AFuxzhlQBQjCCBn2T7NwCC9Sc4
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b70930543bf11405346954b8e712dcaa.exe"C:\Users\Admin\AppData\Local\Temp\b70930543bf11405346954b8e712dcaa.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\b70930543bf11405346954b8e712dcaa.exeC:\Users\Admin\AppData\Local\Temp\b70930543bf11405346954b8e712dcaa.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD571d3049d507423175d589c2e61d47c4c
SHA139d9745d44b695def22653ad9b7d6f65402f8297
SHA256e4ce98d1f1de76088c227c894ba295a6b51e623bc44a098c3901982aae04999b
SHA512986c1ce41aa87f9889ce530cbfbfd94ab6071f2118556692779113dcb81ae5b09b1e909a22bc3c5c922525f764777fbea7884e4456acddf6a0eb3c98920f153d
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB