Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 01:21

General

  • Target

    a46474e4e938396aeb985d90b09375478a8163dd95c242be3c86e7031180ae4e.exe

  • Size

    702KB

  • MD5

    2d88358cab74be60279da415e91d6179

  • SHA1

    b442201ca0105b1b68d44d238efa49cff6c4c637

  • SHA256

    a46474e4e938396aeb985d90b09375478a8163dd95c242be3c86e7031180ae4e

  • SHA512

    ccf299c6af1c278bea57e33c333c036ed403d59de69aaa570b40702143ccc823b6b2d797924ea145776d7751ccea6bbb4616114872fa456efd46eeda3e836e8a

  • SSDEEP

    12288:AnbcDwGjTE7eIJoxyFj+jnBf5nXe+jU1U2EAIVXTBUKJLZmX1:AnDGjY7DJoxyIndtHUqtAIVNxLZmX1

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a46474e4e938396aeb985d90b09375478a8163dd95c242be3c86e7031180ae4e.exe
    "C:\Users\Admin\AppData\Local\Temp\a46474e4e938396aeb985d90b09375478a8163dd95c242be3c86e7031180ae4e.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2064
    • C:\Users\Admin\AppData\Local\Temp\230B.tmp
      "C:\Users\Admin\AppData\Local\Temp\230B.tmp"
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\230B.tmp

    Filesize

    702KB

    MD5

    71a485784d4dd5e3f104369a156b1e4a

    SHA1

    213a1ea7e6fff25aa860a77113e33f3f0398f6ee

    SHA256

    84ea2a620346ccd8f82e0a3a0a5133f4b693a887541ebc2208f4be316b55e18c

    SHA512

    ada66f412e60f90b0dd054aa0e5f6252395761b220e45c97532312f797fbd32e692e296b57827bfa3afce4e324f1507bc3bc1d89b10da28ebd2608552fb3c64e