Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
06/04/2024, 11:45
General
-
Target
BleachBit-Portable/gtk._gtk.dll
-
Size
277KB
-
MD5
b1f14e514fc302d85097b45ea056db5d
-
SHA1
a8b59bd59c91d35f5b3ade33c5de30a50233cefe
-
SHA256
d6f233dc447d7ec4169ff8819aa4857c440407fa890077aa50147b8cab74d5ff
-
SHA512
991fba850010cbeeb6d7f8575991b40dde37adeb9203175244233ac01fc74f2402b8e28afb05fe070990808371ca3bbccb9d18d32375ac4188a948d516e0bffd
-
SSDEEP
6144:Y9xmZI4BD6q8M3SbTUub0rFdzRMMvlbGIrdmj3n1Cu+UfdDJS2PtO9:DZI4BXccuArFdzKMvlbnrqnEk1FxP
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BleachBit-Portable\gtk._gtk.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BleachBit-Portable\gtk._gtk.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1016KB
-
Filesize
240KB
-
Filesize
1.1MB
-
Filesize
900KB
-
Filesize
104KB
-
Filesize
264KB
-
Filesize
152KB
-
Filesize
4.0MB
-
Filesize
224KB
-
Filesize
92KB
-
Filesize
292KB
-
Filesize
328KB
-
Filesize
68KB
-
Filesize
64KB
-
Filesize
156KB
-
Filesize
788KB
-
Filesize
136KB
-
Filesize
156KB
-
Filesize
248KB
-
Filesize
504KB