Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-05-2024 20:53
General
-
Target
3f5b2ed5126309f41419cf2a92e33a818b677fed8f0ead6ca62896213ef3182e.exe
-
Size
91KB
-
MD5
1f33d6ddea8bcd7864fb3dc7fdbdd04b
-
SHA1
5b816d888c5e1890bd7e094f6395a48ebc319fae
-
SHA256
3f5b2ed5126309f41419cf2a92e33a818b677fed8f0ead6ca62896213ef3182e
-
SHA512
83a1ba2414ad6e13f7889ac056a22eae982ed5d433286780594e3e5427ffa6d47ec556c814177da8a98c2a1df1064653be6ef5960d3375553b604a53224f59fa
-
SSDEEP
1536:0uBLJvI2OroGID0y7WOXXB5+jILNsm3sew1mRB9Q9LCtZd3iuYYBR:0eJvI2O0cMWu+ELN33WmRB90Kvft
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f5b2ed5126309f41419cf2a92e33a818b677fed8f0ead6ca62896213ef3182e.exe"C:\Users\Admin\AppData\Local\Temp\3f5b2ed5126309f41419cf2a92e33a818b677fed8f0ead6ca62896213ef3182e.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3f5b2ed5126309f41419cf2a92e33a818b677fed8f0ead6ca62896213ef3182e.exeC:\Users\Admin\AppData\Local\Temp\3f5b2ed5126309f41419cf2a92e33a818b677fed8f0ead6ca62896213ef3182e.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
91KB
MD59de577a103a9b14967ebb60e8227b57f
SHA1fc0f0a5b36574539f2e7916909125bdeddecdb47
SHA2562b361b0b736309c23dc62f9d3f4651074af68908ef841b198e66339349235034
SHA51288951d69c85b626c3b4ea8f8188db84a7d5527776634d0efdadb806bbec083c4ee5e58acd3530f3fb7d57b24b4bcd4ca33035b447319537eaf68342bdd5053ae
-
Filesize
204KB
-
Filesize
108KB
-
Filesize
204KB
-
Filesize
108KB
-
Filesize
204KB
-
Filesize
108KB
-
Filesize
204KB
-
Filesize
56KB