Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
09-03-2024 22:26
General
-
Target
bcf6508c93525f64982e3b4437d8bed6.exe
-
Size
905KB
-
MD5
bcf6508c93525f64982e3b4437d8bed6
-
SHA1
96911ba19e384017c768cdf0c586766db9bdd499
-
SHA256
0d58093371dc0f15289d6151a8b81d091c3e77a9b1083bf90a5c37b98fa785b3
-
SHA512
ff8c295027119fe101fb00b7bcb149bc725db627af480960f4e2cce5c2b3cda032f7b7858fe854a778c1923fb457b51f28fbcf9cbabdc4e43407cd68339eab0f
-
SSDEEP
12288:+Plb6kw59HI6FALCEvvBzPUum23oCSIv8SVc0uElXAZC/GS6:+9Gb9HI9LPBs+3oCSIv+ElQYuS6
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in System32 directory 3 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bcf6508c93525f64982e3b4437d8bed6.exe"C:\Users\Admin\AppData\Local\Temp\bcf6508c93525f64982e3b4437d8bed6.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\RAVMOND.EXEC:\Windows\system32\RAVMOND.EXE -Service2⤵
- Executes dropped EXE
- Drops file in System32 directory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
905KB
MD5bcf6508c93525f64982e3b4437d8bed6
SHA196911ba19e384017c768cdf0c586766db9bdd499
SHA2560d58093371dc0f15289d6151a8b81d091c3e77a9b1083bf90a5c37b98fa785b3
SHA512ff8c295027119fe101fb00b7bcb149bc725db627af480960f4e2cce5c2b3cda032f7b7858fe854a778c1923fb457b51f28fbcf9cbabdc4e43407cd68339eab0f
-
Filesize
4KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
4KB
-
Filesize
4KB