Analysis
- max time kernel
126s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 15:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe
- Size 16KB
- Sample240613-sf5mgstemf
- SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- MD5 e7d405eec8052898f4d2b0440a6b72c9
- SHA1 58cf7bfcec81faf744682f9479b905feed8e6e68
- SHA512 324507084bd56f7102459efe7b3c2d2560f4e89ed03ec4a38539ebb71bccdf1def7bc961c259f9b02f4b2be0d5e095136c9efcd5fc3108af3dc61d24970d6121
- SSDEEP 192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 3752 iimfq.exe - Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\Test Task17.job b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe"C:\Users\Admin\AppData\Local\Temp\b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe"1⤵
- Drops file in Windows directory
PID:2156
-
C:\ProgramData\okeaeil\iimfq.exeC:\ProgramData\okeaeil\iimfq.exe1⤵
- Executes dropped EXE
PID:3752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\okeaeil\iimfq.exe
- Size 16KB
- SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- MD5 e7d405eec8052898f4d2b0440a6b72c9
- SHA1 58cf7bfcec81faf744682f9479b905feed8e6e68
- SHA512 324507084bd56f7102459efe7b3c2d2560f4e89ed03ec4a38539ebb71bccdf1def7bc961c259f9b02f4b2be0d5e095136c9efcd5fc3108af3dc61d24970d6121
- SSDEEP 192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Windows\Tasks\Test Task17.job
- Size 238B
- SHA256 e6ef22bd7c25b831d3118933e035f6c85389bbcad573a41b66192a8fc00fb716
- MD5 dd3b290d9718aa68e6ca9218d8df001c
- SHA1 3e301c2410158daf76905fad7c137a9b3b0068e3
- SHA512 c1be8fb2842c06c9fe7bb010930aaffaf00f39fc4c17ad66168dbeaee03c1e625937e7a79200f7eaf5d705cbb75adc09f26645f0f7204c79aa44b713597ffa1d
- MD5 SHA1 SHA512