Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-05-2024 20:33
General
-
Target
392dc23f995f9f33326cd1c8d0d00acc362ab91b6ac2e01c2f9e4f8f7b55908e.exe
-
Size
1.9MB
-
MD5
4f008d96ed3655c232ca8590e8306d0a
-
SHA1
7d14f057bd4af7f5dc58c7292cec6d6b7ff41a87
-
SHA256
392dc23f995f9f33326cd1c8d0d00acc362ab91b6ac2e01c2f9e4f8f7b55908e
-
SHA512
2549d3d5c262b6adce00dbda839abe183c1fdb6bf76e1a76ef449700abe348d138988db36e809d82f1d6ee3f5cfd18d9e3d3d83a9f971e3015727d9435db8cf2
-
SSDEEP
49152:TaxJOOZ93b3ZmXYZmSadfqkbazR0vKLXZV:OSOHZmIZmSadfqoatuKLXZV
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\392dc23f995f9f33326cd1c8d0d00acc362ab91b6ac2e01c2f9e4f8f7b55908e.exe"C:\Users\Admin\AppData\Local\Temp\392dc23f995f9f33326cd1c8d0d00acc362ab91b6ac2e01c2f9e4f8f7b55908e.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\21D3.tmp"C:\Users\Admin\AppData\Local\Temp\21D3.tmp"2⤵
- Deletes itself
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD5bea0dbf4d6d173ccc4238b314740cb7d
SHA14c199c5f65c71683bf38bc4ef16d386304d669f6
SHA256eabd45e0b2b15738987ce14dcd99f42a41815389b5d98df0033eb41faeb9d423
SHA512b40c747713cf7127ee2ac2b80da8cf0265e237ee0d3ce0016eca11db088f241166a8f68457a549f37828e1fcfb0dcb31d5a841e0017344b341f0276e2cfc4baf