Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
10/06/2024, 15:41
General
-
Target
a7386397c1e21b008502e056347ddb8dd8768d384d2024d4a98c9f1fe347f26e.exe
-
Size
384KB
-
MD5
56f25befc6e475225a25c24132ff48bb
-
SHA1
201adb97693536dba345ce530b54b14e6d5e97c8
-
SHA256
a7386397c1e21b008502e056347ddb8dd8768d384d2024d4a98c9f1fe347f26e
-
SHA512
22bf2b8155ec7f9edcf03fa8b8736871aeb0a3b378e6e31960e36a6fa9811bf7456631044ffc61565d64742332f36641da718d7d5535b72fc1163a7365c8f9da
-
SSDEEP
12288:LKbYDnCZQUYKt5VtdW/sEzrWtHOw0iFauY/B/dc:LKETCZNYGVtdW/sEzrWtHOw0iFauY/B6
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7386397c1e21b008502e056347ddb8dd8768d384d2024d4a98c9f1fe347f26e.exe"C:\Users\Admin\AppData\Local\Temp\a7386397c1e21b008502e056347ddb8dd8768d384d2024d4a98c9f1fe347f26e.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\a7386397c1e21b008502e056347ddb8dd8768d384d2024d4a98c9f1fe347f26e.exeC:\Users\Admin\AppData\Local\Temp\a7386397c1e21b008502e056347ddb8dd8768d384d2024d4a98c9f1fe347f26e.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5e977184d55c23bde7bdfd1fa345e61ff
SHA18a1a1f97b830b692aa485316a1b4d25b5365003d
SHA2566b440fa668afc0e19f868079078713d5dd18ef5a0fcfaee7f60478de30f7b84e
SHA512e126cf450d836a1a10bb43eb42d31a6b218eb89924a2f7236e1105391ea70553e404ac2412d1d62eb990f14ebba7255a8c83f3d282bd437b2d827f5284d2b075
-
Filesize
220KB
-
Filesize
104KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB