Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19-03-2024 01:00
General
-
Target
d4d04cef00cf77dc81a99eb05d96390c.exe
-
Size
82KB
-
MD5
d4d04cef00cf77dc81a99eb05d96390c
-
SHA1
9590eed6036e59f1d06e81874900dbf6306aad30
-
SHA256
326c73ecf9f8ed48acc8de39ab6f9ed9b2e5bc38712f610345bb72c2cde77ff2
-
SHA512
a33c8a16f16693ef759d39c1cd4cd87e760d39c9a376b1c626213665a1ba9dc208f1c920753e2f14b2d31d630d516475e94b38a58abc934d492f81502c608b2c
-
SSDEEP
1536:/Ee71O1WGBxOYLEgr023j7NmGe7fSJpo9/fQA1AJzCYrwbdMTE/R7FE:sFZrl7NlmfyOfQA1cxcBMTwxFE
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4d04cef00cf77dc81a99eb05d96390c.exe"C:\Users\Admin\AppData\Local\Temp\d4d04cef00cf77dc81a99eb05d96390c.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\d4d04cef00cf77dc81a99eb05d96390c.exeC:\Users\Admin\AppData\Local\Temp\d4d04cef00cf77dc81a99eb05d96390c.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5e6fdbdaabc94746f5a15a1883f5db460
SHA15304c29909ab9c05b25ffb2264cf320bcf0acb24
SHA2563adef76eafc59c5b33076f5b0610d6055f65d11b9304c218f10551d624301a4f
SHA512e1b0ebf70acc7c26f4e54d50e5b0a6be9be405aee76442534124ed9050b9e73317c26b16672506142164bec25c41ce10ed0ad1fe7d9fabfdd73aac16f3562da4
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
108KB