Analysis
-
max time kernel
94s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
14-03-2024 01:21
General
-
Target
c75258ed679a5e9f57759af2dd46a486.exe
-
Size
1.3MB
-
MD5
c75258ed679a5e9f57759af2dd46a486
-
SHA1
0dc60fe881e97dfd035e3f1014fd7af30ccfc329
-
SHA256
2da91910c7baec0bfcac005578e4718538d995a2d8932b9e9b08bc9d0d71fdaa
-
SHA512
13fe911724c40c09f202b3ece3c2253b716e5685d052eee978cd89187bf0dac3f90687643730e0f3655bcf825ada0a944e5cc707e63e2d1d1d3131ef0eac30e5
-
SSDEEP
24576:t0h4MXlVO6wXq+LCaXA3I58g9ubs9A98j21MPgTGZ1qIqvG:W1o6wXq+LCcVyWubZ98cMIG/q
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c75258ed679a5e9f57759af2dd46a486.exe"C:\Users\Admin\AppData\Local\Temp\c75258ed679a5e9f57759af2dd46a486.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\c75258ed679a5e9f57759af2dd46a486.exeC:\Users\Admin\AppData\Local\Temp\c75258ed679a5e9f57759af2dd46a486.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.4MB
-
Filesize
1.9MB
-
Filesize
1.1MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
1.1MB
-
Filesize
1.9MB
-
Filesize
1.9MB