Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
12/03/2024, 03:36
General
-
Target
c25b249698971cb3a2792c458105e126.exe
-
Size
82KB
-
MD5
c25b249698971cb3a2792c458105e126
-
SHA1
997b2f930bba06e89ff7f30100afebd481ddde02
-
SHA256
07f6bb63507293b2ea0827c5a757dbd2d20698ee1883126058351dedcb7b10ae
-
SHA512
23cea70b4b6d8b01a4d850c6deefb177658200ffc14019ec91610210dc89d30b463e27b72b51d349d93a9871490ed1f3287691891d8e71b834190a42efe9d529
-
SSDEEP
1536:/NgCoR9ty5EG9IEQMa24Mvyrx32KMsW1Sp3Ua3F2694dYHsNPEKMF3ZQjcjZ:OI5Ew4MveNMsWgp3RF269LHsNcZQ4
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c25b249698971cb3a2792c458105e126.exe"C:\Users\Admin\AppData\Local\Temp\c25b249698971cb3a2792c458105e126.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\c25b249698971cb3a2792c458105e126.exeC:\Users\Admin\AppData\Local\Temp\c25b249698971cb3a2792c458105e126.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD53c67afc0942a941f9ce5c9c0003e4b6e
SHA121e6003d5f0429ed279e7e4dc10b60a796ac17a9
SHA2565173537344f9b17364992425910c9f995d288b4c3c4cdb495a7305b7cdc441f4
SHA512c5a0ac76a45a98b8b47661c8a89df205bd9921e64bc902e5c1be05b7872d0b54155a46e95d63724aace5c3eeb028c767f58fb5859c97b426975bb86bdc9a2082
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB