Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19/03/2024, 19:10
General
-
Target
d6e5da17621df4cbc27e66ebe62babb4.exe
-
Size
21KB
-
MD5
d6e5da17621df4cbc27e66ebe62babb4
-
SHA1
ac65f90fef28ce0fa06a56cda9f09d0c35794722
-
SHA256
f8c85581e4242eaf3fe23f504184ec7c9b7d8d886ddc7bbb10cb5e59097a6f62
-
SHA512
fd41152ac35f9c6e375da2519425405028a2b28cbac071fb07fb73d844add9eb3352d648b30125df98f2b7d8cbfda7ca5ce6772530f9c618782d8c217ab5d198
-
SSDEEP
384:aq0e2vDOHGybyrSx4PFCGinfaU1HpliafpxGbNOaBM1etYl6qP6353B:Ce2CXyrSzfJlLfpcROaq1etYMKsB
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in System32 directory 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6e5da17621df4cbc27e66ebe62babb4.exe"C:\Users\Admin\AppData\Local\Temp\d6e5da17621df4cbc27e66ebe62babb4.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\kncer32.exeC:\Windows\system32\kncer32.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21KB
MD5d6e5da17621df4cbc27e66ebe62babb4
SHA1ac65f90fef28ce0fa06a56cda9f09d0c35794722
SHA256f8c85581e4242eaf3fe23f504184ec7c9b7d8d886ddc7bbb10cb5e59097a6f62
SHA512fd41152ac35f9c6e375da2519425405028a2b28cbac071fb07fb73d844add9eb3352d648b30125df98f2b7d8cbfda7ca5ce6772530f9c618782d8c217ab5d198
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB