Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
11/04/2024, 03:24
General
-
Target
unins000.exe
-
Size
657KB
-
MD5
723d1973489c4dcaedbde75b11267eff
-
SHA1
d77c11187796678d0d84a122bced8b6841eebf3b
-
SHA256
797149c2198a8f9807ecbae1c5a1fa092b519c5cc00428d4b19b09d8d6d41d20
-
SHA512
649f5b5d0b851e453c3a0933a2236f28e2bb8b368b158903a38d5425cde4b555b19f814a81f540f62760a269817a1d45439021dbaac5f2bc64b537ebb0b5d285
-
SSDEEP
12288:YkxzR0UkTrP/37YzHXA6hLDnQJMgNLKgDRB6K3Uhp7r0x94:3FR0UkTrP/37YzHXA6tbQ+8Tgp30x94
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\unins000.exe"C:\Users\Admin\AppData\Local\Temp\unins000.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\_iu14D2N.tmp"C:\Users\Admin\AppData\Local\Temp\_iu14D2N.tmp" /SECONDPHASE="C:\Users\Admin\AppData\Local\Temp\unins000.exe" /FIRSTPHASEWND=$701EE2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
657KB
MD5723d1973489c4dcaedbde75b11267eff
SHA1d77c11187796678d0d84a122bced8b6841eebf3b
SHA256797149c2198a8f9807ecbae1c5a1fa092b519c5cc00428d4b19b09d8d6d41d20
SHA512649f5b5d0b851e453c3a0933a2236f28e2bb8b368b158903a38d5425cde4b555b19f814a81f540f62760a269817a1d45439021dbaac5f2bc64b537ebb0b5d285
-
Filesize
4KB
-
Filesize
708KB
-
Filesize
708KB
-
Filesize
4KB
-
Filesize
708KB