73fa8921d2985961503f1e7e52390310d824736988568cdaae91585b2c712306 | Triage

Analysis

max time kernel
145s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/03/2024, 01:19

Sharing

Report Analysis Logs

General

Target

ccbdeb4787e5e6361ae1f3e290b4e9cf.exe
Size

33KB
MD5

ccbdeb4787e5e6361ae1f3e290b4e9cf
SHA1

4d829d2371c5c544770f77b1cbc1b6976c97c65d
SHA256

73fa8921d2985961503f1e7e52390310d824736988568cdaae91585b2c712306
SHA512

9903bf6c1bac61e7d03ac9e9eb3a85c935a68cf0b83fe1145f5603cc65bf0c84f907a1dedc25664209194d475387a61c9fe7c791025943bee72d2715a60c4768
SSDEEP

768:YKR4etomWZq0csFh4sxTX+uTacSFOtX08:Yg4Gt92zxTHSF

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	\??\c:\windows\SysWOW64\ccbdeb4787e5e6361ae1f3e290b4e9cf.exe	ccbdeb4787e5e6361ae1f3e290b4e9cf.exe
File opened for modification	\??\c:\windows\SysWOW64\ccbdeb4787e5e6361ae1f3e290b4e9cf.exe	ccbdeb4787e5e6361ae1f3e290b4e9cf.exe
File created	\??\c:\windows\SysWOW64\ccbdeb4787e5e6361ae1f3e290b4e9cf.dll	ccbdeb4787e5e6361ae1f3e290b4e9cf.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2788	ccbdeb4787e5e6361ae1f3e290b4e9cf.exe

C:\Users\Admin\AppData\Local\Temp\ccbdeb4787e5e6361ae1f3e290b4e9cf.exe
"C:\Users\Admin\AppData\Local\Temp\ccbdeb4787e5e6361ae1f3e290b4e9cf.exe"
1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
PID:2788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2788-3-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download