Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
15/03/2024, 07:16
General
-
Target
cacfcdc1f485b2078914cc0c7a9e3ecf.exe
-
Size
82KB
-
MD5
cacfcdc1f485b2078914cc0c7a9e3ecf
-
SHA1
32f43858cf4eacc8af9dc45a4018993774515f59
-
SHA256
c6b16b12dda09c8ce8a5d1697c08958b535a35393fcf6dffe545547fe9645df1
-
SHA512
078b4a52c47be457a98d54b87f9eff3cd52051b33ffdc5698a0fef56c1fbcd7b3a3be15a75d26bf579251e1d588ea6642d45e840709cf3291e01e2e2cec7427a
-
SSDEEP
1536:V1dTUk+Db7XFzXHb1lU9fhfctR8x5aelQINnvXb1optZ:tUkwXYVpctTINnvrstZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cacfcdc1f485b2078914cc0c7a9e3ecf.exe"C:\Users\Admin\AppData\Local\Temp\cacfcdc1f485b2078914cc0c7a9e3ecf.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\cacfcdc1f485b2078914cc0c7a9e3ecf.exeC:\Users\Admin\AppData\Local\Temp\cacfcdc1f485b2078914cc0c7a9e3ecf.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD56a7dedcebb1f3c9b0f3e1f0a4c0789bd
SHA11e08088f3811cbcbcd9918bb98b9ec59a1ce2e9a
SHA2563dfd98e27b18ea7e57b42433cdbcaa7ebd13d4f240252908f0bff10c54086e7f
SHA512559c6c9d9e9bb6939a2c7b261b824b277339daeb8bc58ae525a3f2092382284d0895545824ab38fb3eed093405f6e22c7aae349857aeeacedffd59d985a57d52
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB