Analysis
-
max time kernel
141s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
03-05-2024 14:29
General
-
Target
cs16-eng.exe
-
Size
262.2MB
-
MD5
47c6bc42ac4f0e1411427db81bb4fb4e
-
SHA1
9c020779a5c155c8110c8849c59aa099de1b17e6
-
SHA256
b2275e14444b3212c19b78cdf25f74851f4d4092f0e32ed4d35ddb6aee5a9c86
-
SHA512
e8c59615696df479cfd82655cd0f64954b81a51f2e328c5cb82997a46a5df2403ba016b991f6d2276ca609309f893f43fc54c635df4f528ec5d010847e9af183
-
SSDEEP
6291456:wUMXs+Qt/VZ+VZ5OhR/juaKFX3CX6ohYIHxZJPN7kkI88:pCyudOhR7wX3CKohpxNIRh
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cs16-eng.exe"C:\Users\Admin\AppData\Local\Temp\cs16-eng.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-9RA84.tmp\cs16-eng.tmp"C:\Users\Admin\AppData\Local\Temp\is-9RA84.tmp\cs16-eng.tmp" /SL5="$400EE,274289404,145920,C:\Users\Admin\AppData\Local\Temp\cs16-eng.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD538500580ebb2187f95ba2116f236732d
SHA1cf63a5fc216da7e7497f9b6126d5d994aab1f74c
SHA2564d69ee6465dc04230d80fa5bd82fa522c784bfdd5be515109e9a80e75ffe195a
SHA51205ddb22d74da9cc5e634ac9dc388049f94a57728fde95cb08992c7e1a03902b76640794666bf174b8421ed2231a6a853c6d30941a23ecdd5324bffa24f845aef
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
184KB
-
Filesize
68KB
-
Filesize
184KB