Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
27/03/2024, 07:07
General
-
Target
e113027fab6dd43e8b21b706fda15e31.exe
-
Size
82KB
-
MD5
e113027fab6dd43e8b21b706fda15e31
-
SHA1
9ae369aad9345b4ff39b8b8201eae06ae8b34858
-
SHA256
edab85de0471f07e7c77549df85657a06141fb9bddaef0d06d3c2284127eb23c
-
SHA512
bfd5f070a4e282e6a448d663416672dff6731f43abda24196e3492df2e70294ea2c7a2a838acdefe4bfa6609ccd4014e8dbe9715197f8e88f249aaea929143ca
-
SSDEEP
1536:D1ej6O50AmoO9Xzb1mqvKxzuD3cI+8JdC9A3m/:BeB50AmoO9dpI63cI+2g
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e113027fab6dd43e8b21b706fda15e31.exe"C:\Users\Admin\AppData\Local\Temp\e113027fab6dd43e8b21b706fda15e31.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\e113027fab6dd43e8b21b706fda15e31.exeC:\Users\Admin\AppData\Local\Temp\e113027fab6dd43e8b21b706fda15e31.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD573d6764f8c9aa46d9f651223528bb418
SHA1573f9d8ab4d389c14edafd1fd48ccd5b347c1266
SHA25603defd06f61fc14f90d61e49542a9f8053830f41e82ac387039875a30950ed2b
SHA512ddb735d8a693c0d34bffda08fc193016db89346943f96abebc5743f0431318c63345e6cb9343a9b30512738d96aaf46155d73d2f2a3304aee49df7960201fa0e
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB