Resubmissions
22-04-2024 22:02
240422-1xtwbagh68 1022-04-2024 19:25
240422-x42b7afa68 1019-04-2024 03:02
240419-djmthsfh8w 10Analysis
-
max time kernel
144s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
22-04-2024 22:02
General
-
Target
1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.exe
-
Size
1.7MB
-
MD5
74a37bb794ed287696eac4495ffae13f
-
SHA1
0097bc646687e8441db0079c3f85320be39e4a13
-
SHA256
1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228
-
SHA512
17770d69d3792f1663d58d2d5c1b1cbcac04ac9ef85c0416bb4f69ca3410b710953f384039999e8719a798bf4cd751226a2282affb7f959197eeccb782126950
-
SSDEEP
24576:s7FUDowAyrTVE3U5F/9GqKVKic6QL3E2vVsjECUAQT45deRV9RZ:sBuZrEUwzKIy029s4C1eH93
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.exe"C:\Users\Admin\AppData\Local\Temp\1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-EDJLU.tmp\1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.tmp"C:\Users\Admin\AppData\Local\Temp\is-EDJLU.tmp\1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.tmp" /SL5="$D004C,922170,832512,C:\Users\Admin\AppData\Local\Temp\1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
MD529c7863663a6218935710a3f95f69e24
SHA1f432dfcf453817fd00c16c035b16be778074e29b
SHA2568ab8594026e4bc39b73dd7ebefa28082ab9630efc2c2353357d24830534f0b16
SHA5127eb8f9b4f3ec2c7e06bddd74aab3d7a0e860465d34e8551ee728ee3e562d945acd0a06495567f6bccdc11d9e3b5b6f06a452528acacf4f73142caebfe3bcff94
-
Filesize
232KB
MD555c310c0319260d798757557ab3bf636
SHA10892eb7ed31d8bb20a56c6835990749011a2d8de
SHA25654e7e0ad32a22b775131a6288f083ed3286a9a436941377fc20f85dd9ad983ed
SHA512e0082109737097658677d7963cbf28d412dca3fa8f5812c2567e53849336ce45ebae2c0430df74bfe16c0f3eebb46961bc1a10f32ca7947692a900162128ae57
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB