Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
23-04-2024 02:09
General
-
Target
a8ee19cfe007bc9f5b0dd797bd704988651737046fc0a4a81b70321f2cb38b50.exe
-
Size
416KB
-
MD5
cd664144ffa3fc02dd3b49b587a8fda1
-
SHA1
3ed77f33c36e9606f05d1bbac8371400c6ea095f
-
SHA256
a8ee19cfe007bc9f5b0dd797bd704988651737046fc0a4a81b70321f2cb38b50
-
SHA512
b5605f54f64ba923f00e93d31e76e220e2918543037a366bf37099caef883301640aefb714867f1fbe1d7dbe98ed6536fedd8d49b78c254457bb74f089b9f691
-
SSDEEP
6144:fygf7cIdRErq98WyekeGTZ1WdDJboY4sJ9pALL7j1aFwoF:fHTWxAkdT6D9d9pAi
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a8ee19cfe007bc9f5b0dd797bd704988651737046fc0a4a81b70321f2cb38b50.exe"C:\Users\Admin\AppData\Local\Temp\a8ee19cfe007bc9f5b0dd797bd704988651737046fc0a4a81b70321f2cb38b50.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\a8ee19cfe007bc9f5b0dd797bd704988651737046fc0a4a81b70321f2cb38b50.exeC:\Users\Admin\AppData\Local\Temp\a8ee19cfe007bc9f5b0dd797bd704988651737046fc0a4a81b70321f2cb38b50.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
416KB
MD568928941218aeee8977bd41026192878
SHA10f925a33e3786475903a37f046848adbc4a6bd01
SHA25655bdb56f5c85bc0a2a3dcd6244c016c4c69d905408226fda860aac8b1d2dcafc
SHA5121472dd9d84f52c47ecb558fe28c2c9fee212a4aa5625795a1f409f1ad7f33a18c6b76e10cd7d8fb6f572e1e3e718410900a9da628255e38df81b0106fa21b7ea
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
84KB
-
Filesize
216KB
-
Filesize
216KB