Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26/03/2024, 22:57
General
-
Target
9c117e3334b25fc7a3005a6496179613af7656906cb6cf5ba91f8800b7e3d46e.exe
-
Size
442KB
-
MD5
37452a5097fc4229b5965285a280fa0a
-
SHA1
4dd0ea44f00337d4f5d37ecb292590c7328048f3
-
SHA256
9c117e3334b25fc7a3005a6496179613af7656906cb6cf5ba91f8800b7e3d46e
-
SHA512
c92a4b980f619caf58082c3c1e3aa9bb244db365fbb21c4fbbafb8ef8ea25152be53357a72eb39b6db6c41189836f5cf29ce38cf99aaa0c7160085e16bd67fda
-
SSDEEP
12288:uyFacQrmoLqd/zU8B3A+EFmDMLmo5/J1Ng8OBVUyfrJbzwvPkjkx05SL5+GzIED9:ZFBXpd/zUs3A+EFmDMLmo5/J1Ng8OBVi
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c117e3334b25fc7a3005a6496179613af7656906cb6cf5ba91f8800b7e3d46e.exe"C:\Users\Admin\AppData\Local\Temp\9c117e3334b25fc7a3005a6496179613af7656906cb6cf5ba91f8800b7e3d46e.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\9c117e3334b25fc7a3005a6496179613af7656906cb6cf5ba91f8800b7e3d46e.exeC:\Users\Admin\AppData\Local\Temp\9c117e3334b25fc7a3005a6496179613af7656906cb6cf5ba91f8800b7e3d46e.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
MD54efe8a2a285595078705ff1b6437afb3
SHA1949f4c21ef8a52213caf0ce1ede09ca2f5ae72cd
SHA2563b1006b7ab380e6ece08d6f6ed51ad6f5dc383daa6961938993b73e43c18880b
SHA512df1a3c271458c49dcc41651d0ed5959bc319e00a1a3dee267aa563d601b2629aa98c15fb5a524d6c2e859e354a0a26b58ffabdbf82f2dbcb0b85f9cc24dcd095
-
Filesize
104KB
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB