Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09/04/2024, 20:28
General
-
Target
d28be6b84135870b1ad2aaa7caf23194.exe
-
Size
998KB
-
MD5
d28be6b84135870b1ad2aaa7caf23194
-
SHA1
8b5eb254824783d30868c1fd36d98e8c163ac9b0
-
SHA256
54fb3e9551c512964323ed48791c7a8d7e46eb14dea158c27c156788c8183f18
-
SHA512
9e0b2277de84de0c3ac77cbe8648fa48e050fc5cb59beac4bf1db2da489423300151d4ab9758b3caad0aae7c581ca33954347dea445c2a1705c99d61e00f2634
-
SSDEEP
24576:Ca2kGuH2UTuVtdRe1IJbwX9LZmN1VUZmRnZVhJP0Y:Ca2kGHESZmZmXiZmRZVL0Y
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d28be6b84135870b1ad2aaa7caf23194.exe"C:\Users\Admin\AppData\Local\Temp\d28be6b84135870b1ad2aaa7caf23194.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\580F.tmp"C:\Users\Admin\AppData\Local\Temp\580F.tmp"2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
998KB
MD5c091c8ce49db93eb56cf615c5576df16
SHA1361d77b78459d3771ab986b4840117df94c8fbc2
SHA256c5322e0b46483845712cf658836283ee740be552578a1a97407dc3898563ebc5
SHA5127a46a74aa8874a984afac741bc93c2ab0f3dcd6cd4c8ab436cc7a203164f13205f5906efaecfa2ae32f4f6788739a14b4b742e072fea4f93415dbe2329500afb