Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25-03-2024 19:56
General
-
Target
87774ce468bc41522d64bfaab0f74ce2c756580add75a12fc948eda70d38abb3.exe
-
Size
410KB
-
MD5
d6112773d10a388f944574181429c592
-
SHA1
f4369c7db9a754e5f3859f588c6086f47b840496
-
SHA256
87774ce468bc41522d64bfaab0f74ce2c756580add75a12fc948eda70d38abb3
-
SHA512
7029fdf25c765af0fc2cd604058d0e13f3c2fa08a44f6d42d5060aaf9734fa8be5fdf7f99793e02125ec6223edf8fec2816e3ee7b44e4238baca08e401d55b85
-
SSDEEP
12288:WZ0fDqO5Fr9XmzHXFSe7wuf9XmzHXS9XmzH:WZBO5Fr8zHXFSe7wuf8zHXS8zH
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\87774ce468bc41522d64bfaab0f74ce2c756580add75a12fc948eda70d38abb3.exe"C:\Users\Admin\AppData\Local\Temp\87774ce468bc41522d64bfaab0f74ce2c756580add75a12fc948eda70d38abb3.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\87774ce468bc41522d64bfaab0f74ce2c756580add75a12fc948eda70d38abb3.exeC:\Users\Admin\AppData\Local\Temp\87774ce468bc41522d64bfaab0f74ce2c756580add75a12fc948eda70d38abb3.exe2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
410KB
MD5dbf5b0c94bc4afeb170703585e415ca6
SHA16e69e2ab7e08592b1822327201d3932b78ea57ff
SHA256ddce27bdac5973527323380aba4e8fecf00eef67b2c0066c913979dc27babfd4
SHA512516cdf949c9c294670300f85e5ebd756bbc56a07a589a54b79a6c4db22b2d8e75f97fe56ff67fa41f4de624cf55ed459bb924bdf6bc7d2e06ec85db170ee954b
-
Filesize
464KB
-
Filesize
464KB
-
Filesize
464KB
-
Filesize
464KB
-
Filesize
464KB