Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-05-2024 22:48
General
-
Target
6ad38b2a4428a81203b92d1f560d6170c13f171af5dd2e7712b069c4e2a2d540.exe
-
Size
767KB
-
MD5
10007826acd1aa3404bcfd4f4e203278
-
SHA1
ddd77f3326f51df26d8347516ff765b01c1f4a83
-
SHA256
6ad38b2a4428a81203b92d1f560d6170c13f171af5dd2e7712b069c4e2a2d540
-
SHA512
6f05c517845f40433f8cde33d2fda74f4d3dd4cc49fbd131331f1e10477c890a907883fbcf1fb9ce6aa8b7b0ffb84920009ebe95dcfc8b8626048e866c9e43db
-
SSDEEP
12288:sT+WFw6qgDZytk/cuoPGXqXOPHfMFlWaoiJ4FgxBC8KXP9rZt3xavCKJLZmzT1Sm:sTc6RMug8PH4WRiJtHKXTcLZmzT1Vb
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ad38b2a4428a81203b92d1f560d6170c13f171af5dd2e7712b069c4e2a2d540.exe"C:\Users\Admin\AppData\Local\Temp\6ad38b2a4428a81203b92d1f560d6170c13f171af5dd2e7712b069c4e2a2d540.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\208B.tmp"C:\Users\Admin\AppData\Local\Temp\208B.tmp"2⤵
- Deletes itself
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
767KB
MD5b59af32bf2235f5d0335715d9f9c00ba
SHA1d0fa3b074c330956e0368fc189fc552bb14d0a82
SHA256b541cb6263096b01682bb63e0c274eb963b6d184588fa6596895f54faa3a2bb6
SHA512f3a7725d71fe6b32cb14361dacb172b4af9b70bba68239c469ba87952456d5e71286302dfba135bb8b3f79337811716ff57ea56b03405dc7369ae194653e1c36