Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30/05/2024, 02:03
General
-
Target
b5ecf9783bcff126255b0f4fb2ee1095412cf9806e19cac18d99705041248f1e.exe
-
Size
4.4MB
-
MD5
b794c1022920544c9364172d1fbe30ba
-
SHA1
5f4162a8b339a606aa27ac10f52eebd8dc618e41
-
SHA256
b5ecf9783bcff126255b0f4fb2ee1095412cf9806e19cac18d99705041248f1e
-
SHA512
b7ee12824a2c561502cc93dfe7d1f29aeff970f6504b3a037abb284831e6899f70d7b56caf8c49f52e9151a7b774decbc324037f8a9370336d5914c961696e7d
-
SSDEEP
98304:emhd1UryemFehaEPlBZKFoGiUWVV7wQqZUha5jtSn:elzhFZK+/US2QbaZte
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5ecf9783bcff126255b0f4fb2ee1095412cf9806e19cac18d99705041248f1e.exe"C:\Users\Admin\AppData\Local\Temp\b5ecf9783bcff126255b0f4fb2ee1095412cf9806e19cac18d99705041248f1e.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\638.tmp"C:\Users\Admin\AppData\Local\Temp\638.tmp" --splashC:\Users\Admin\AppData\Local\Temp\b5ecf9783bcff126255b0f4fb2ee1095412cf9806e19cac18d99705041248f1e.exe 9E505DB806F3A774521D076A91F39C1EFEC48D78387B288C346DCE64744451FD6636ED79E28E4631C591E4E254BE660492B1C68F4DEBB183CF4918804F5B31B72⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.4MB
MD588d242de743c2051ea9a986a4eaff9fd
SHA14275d11f131f93bf2066010903c44f75c1ed9be6
SHA25637f7efcc143865f1d07c732745ed5a8850b3302976c09078f955306eec4977f9
SHA512ed960fefe6c7fa4749f545716781cd03c6617d69a6df0a2072e43d4fb62fc49d8e3e6f04442c3a407e88fb806f0642a363dc1faef910b0f54e6caa1c227173a9
-
Filesize
4.3MB
-
Filesize
4.3MB