Analysis
-
max time kernel
141s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
03/05/2024, 15:12
General
-
Target
gwb.exe
-
Size
3.0MB
-
MD5
7f4aeafe073e320d9efc9de7ccbca437
-
SHA1
6c17de9fbb7fe2d74a1a7468a4cf47957fd2e595
-
SHA256
5b1e40c694f550b781b5914a1fcfdf1683975155c161df2dd770da68652599a1
-
SHA512
302d314fdfc1d19d291ee6088d3df609ab74bfa367a5c9a07d7af8fcd5b006d9764f5e9a75def7ebab1967758319e5b5a7c783f55a809b866e997a9d1d128f17
-
SSDEEP
98304:AMe97B8givKWS7to2xywiRIOQwob+giVsTSczTyd:AMe9SvBSp0w2Lbr02d
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\gwb.exe"C:\Users\Admin\AppData\Local\Temp\gwb.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-O86S7.tmp\is-RROC3.tmp"C:\Users\Admin\AppData\Local\Temp\is-O86S7.tmp\is-RROC3.tmp" /SL4 $B0050 C:\Users\Admin\AppData\Local\Temp\gwb.exe 3137753 691202⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
571KB
MD55a19f5595b4f12b6d7449bf52bfe2aed
SHA1dae85d5119344de86b8e2a9c8aaa90c759310050
SHA25668db13c81ae2bac7d1d19cc7c92eda987c42110bbcc32e9ac78537320d688c71
SHA512cde4fd2be1fb79c2cbef0be30f43b007109b0d0423a6cc99354b1a643977be633c90c068c558a3fbc3451a1cb8f1b27f2e554f0308ae0d8a0ccd97c84b9632d5
-
Filesize
96KB
-
Filesize
48KB
-
Filesize
96KB
-
Filesize
628KB
-
Filesize
628KB