Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
05/04/2024, 07:59
General
-
Target
1stsol-v24.exe
-
Size
8.9MB
-
MD5
7832eaebce980435a8a443819d3d2ba6
-
SHA1
e7c8e7adc7c63e2b00881bf7ba8e1e3dc934aa06
-
SHA256
3e611f3a60b74b9c9f38fe5d6c1f7d900a1a8ec5fdce26393b5ce41ba037ce31
-
SHA512
d624c46d4905307fcea4464983758b03fec81f1426021dbb24cbb94c8e26b2bcf482e02e3e42cd3bf8dd34d2ade8d0da798949e1907fe326fd3863504044bc94
-
SSDEEP
196608:MRWwi/INB1l6/cl89BBcwYKAGx9Tn+1W41Q2H/O5NSTuwQ2SnxBzv70:M40/D8nvgGxZ34S2HWJwQbxB/0
Score
4/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1stsol-v24.exe"C:\Users\Admin\AppData\Local\Temp\1stsol-v24.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-5L193.tmp\1stsol-v24.tmp"C:\Users\Admin\AppData\Local\Temp\is-5L193.tmp\1stsol-v24.tmp" /SL5="$4010A,8881452,121344,C:\Users\Admin\AppData\Local\Temp\1stsol-v24.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD59bf6be74782de2e2cd188a2114d4b58c
SHA16e9e8feeebcb00c5e1c51901b9b4b42d4cc445f7
SHA256ad43201afae2942efc817f659fab4146f2a799b7c5d8d2b43bd89dbb7991b2cc
SHA51234ab63c80fdbbbe22ecdbcbd9ab5d41d8f02fcff3f55bc6725f8cf8fd9e1e92d56141dcbf5fa92685b5aa9a83c175184369106ccf4994ffb897f72aa5f23da9d
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
4KB