Analysis

  • max time kernel
    92s
  • max time network
    120s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/04/2024, 04:08

General

  • Target

    ec41dcb9cd982cea0245b96205bc89155628c42a1cfb458de4bb794963d75b6d.exe

  • Size

    1.0MB

  • MD5

    492a30b86e99cabfc13a4a634d7884df

  • SHA1

    ecb0e8185d1660bf91584d97d1b1dda036fb25fc

  • SHA256

    ec41dcb9cd982cea0245b96205bc89155628c42a1cfb458de4bb794963d75b6d

  • SHA512

    c847c39df268c6b5641f278f68b18669b7277278732abb6592880240c0b8b163e4d1a834ce03076c3e10ca985e5b47411fa8e2d05efde5f4aaf106aabd924a70

  • SSDEEP

    24576:KaObU4A2jOVPL7AVfXMmqaZNBLZmN1VUZmUt0SOaWU0+tyvhBDlsyzt5EkmGEHo5:KaO0K6LA0mlZmXiZmUt0SOaWU04yvHDZ

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ec41dcb9cd982cea0245b96205bc89155628c42a1cfb458de4bb794963d75b6d.exe
    "C:\Users\Admin\AppData\Local\Temp\ec41dcb9cd982cea0245b96205bc89155628c42a1cfb458de4bb794963d75b6d.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1448
    • C:\Users\Admin\AppData\Local\Temp\34BC.tmp
      "C:\Users\Admin\AppData\Local\Temp\34BC.tmp"
      2⤵
      • Executes dropped EXE
      PID:3488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\34BC.tmp

    Filesize

    1.0MB

    MD5

    0fcd94545c7062b4b4390a7d09791e08

    SHA1

    b315a7c483f4fac1c51875e79eca25e80b6cd48d

    SHA256

    12cfde2f6409562d4a2dc440228a9a110eb8de4ea6bce3ea08f6b33f11b3f4b7

    SHA512

    2035a371399472c63560e7247a72c021102f398adb8fe337222efaad8d8ee84d3075a4bdc6d2dff85a769ed7750588f42937e5f17f188978fe2b51831e1f632f