Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/03/2024, 20:58
General
-
Target
8d09533f91aa0ec7fe305d91229ea2b443ffc56241b85485b83b725d0a417ffd.exe
-
Size
320KB
-
MD5
a8a47fbbaa07ffa078cb063b7312def9
-
SHA1
8792e9fd0f4263ff8b500afa699e796564ee2deb
-
SHA256
8d09533f91aa0ec7fe305d91229ea2b443ffc56241b85485b83b725d0a417ffd
-
SHA512
611b2b644f5d0dbb8867d95f44845b92fe3f8ee1be0fca54e08d0048050c80dda1d9e198d53ff975fec38d6e6ddeb50500da25a52ae68da5f304f6f96677f41a
-
SSDEEP
6144:l0zMAaAMgvGp++cKN85KMWdDJboY4sJ9pALLM:lAVMVpf0KM6D9d9pAs
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8d09533f91aa0ec7fe305d91229ea2b443ffc56241b85485b83b725d0a417ffd.exe"C:\Users\Admin\AppData\Local\Temp\8d09533f91aa0ec7fe305d91229ea2b443ffc56241b85485b83b725d0a417ffd.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8d09533f91aa0ec7fe305d91229ea2b443ffc56241b85485b83b725d0a417ffd.exeC:\Users\Admin\AppData\Local\Temp\8d09533f91aa0ec7fe305d91229ea2b443ffc56241b85485b83b725d0a417ffd.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
MD5ae296634e41f6a8be9eec91e2573ea34
SHA1d1b2983fa0442741b7e410bafcc63144b694c46d
SHA2567aeb2cd0e7d940c114c92fbd21af6c5853faa07fac890b400bf8880743157ddb
SHA5125a6e4368a6973c3757790449d70e0ad99b0d6b43430d4f7d2db62bafa58d370b7f51359447c99131add1a6ce39a4fcbce54f40c4eda8c2f273b5ac0dd51bb0c0
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
84KB