Overview

overview

7

Static

static

3

78f9d94d09...d8.exe

windows7-x64

7

78f9d94d09...d8.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 22:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    78f9d94d095bf829499d19dada8b637e35cb84ff69aa23212c0c264d0dc079d8.exe

  • Size

    416KB

  • MD5

    c7b466a7928c9bf56952b444c477e7c9

  • SHA1

    515dc7b51abd7c3c2963058bc6c5d5bb4b912bfa

  • SHA256

    78f9d94d095bf829499d19dada8b637e35cb84ff69aa23212c0c264d0dc079d8

  • SHA512

    e171c198ce126f461fb8fd038d1f4b43cf60d2ebadc5387299793fb39f907da1b7196ae9ce6a6a0fbfa0517767957f8273607518dfc61f15d38e271a5a063c27

  • SSDEEP

    6144:XqWAAH+Om79H0W7cyqCxSngmMBqfycuPbUl0i5cD5J6KE:XqW9H+Om7j0npM4dl0v5JdE

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78f9d94d095bf829499d19dada8b637e35cb84ff69aa23212c0c264d0dc079d8.exe
    "C:\Users\Admin\AppData\Local\Temp\78f9d94d095bf829499d19dada8b637e35cb84ff69aa23212c0c264d0dc079d8.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: RenamesItself
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Users\Admin\AppData\Local\Temp\78f9d94d095bf829499d19dada8b637e35cb84ff69aa23212c0c264d0dc079d8.exe
      C:\Users\Admin\AppData\Local\Temp\78f9d94d095bf829499d19dada8b637e35cb84ff69aa23212c0c264d0dc079d8.exe
      2⤵
      • Deletes itself
      • Executes dropped EXE
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of UnmapMainImage
      PID:1784

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\78f9d94d095bf829499d19dada8b637e35cb84ff69aa23212c0c264d0dc079d8.exe
          Filesize

          416KB

          MD5

          5272c181ebd3ac14546b088d53ecc41c

          SHA1

          293535973731b6a4d4583d58c7ab2d3b91344e6a

          SHA256

          455d9cf95ebee56ebdf9d50f43647303bc246e83660350c330d84725bea72563

          SHA512

          a82c9e92a6cf5cd86181f586c1680dc2327e83562b4c93f83027975600ccbb7c42ebd239ec5d225c0b863e73211bc8ed74094a5f8e95109ce5ad1d37e09ac543

          Download Submit

        • memory/1784-9-0x0000000000400000-0x0000000000441000-memory.dmp

          Filesize

          260KB

          Download

        • memory/1784-11-0x0000000000400000-0x0000000000415000-memory.dmp

          Filesize

          84KB

          Download

        • memory/1784-16-0x0000000000330000-0x0000000000371000-memory.dmp

          Filesize

          260KB

          Download

        • memory/2436-0-0x0000000000400000-0x0000000000441000-memory.dmp

          Filesize

          260KB

          Download

        • memory/2436-10-0x0000000000400000-0x0000000000441000-memory.dmp

          Filesize

          260KB

          Download