Resubmissions

25-06-2024 11:46

240625-nxaffsxfme 10

25-06-2024 11:35

240625-nqbpyaxcke 10

24-06-2024 09:07

240624-k3smfaxgkq 3

Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 11:35

General

  • Target

    90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674.exe

  • Size

    236KB

  • MD5

    2fde1e85e1ead98a8c0e1ca7eda2a243

  • SHA1

    4e195c7dc0d7bd995b81fc481dd300e966481201

  • SHA256

    90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674

  • SHA512

    b56a5d33fd6f99d092e5a2b7d332c0632eb4354a1c64cfb66b4a9997e5f6e0fd9d019b775705e89fe94c26b41762e11ede9dda150fc19a857ca9e2cfc05b65b2

  • SSDEEP

    6144:FXtIh3WC7HpTBJNDrSfdH/qiNMxsJSoR:FXtsPpTrhgdHChxsJN

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674.exe
    "C:\Users\Admin\AppData\Local\Temp\90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:1780
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:2172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1780-1-0x00000000001B0000-0x00000000001B1000-memory.dmp

      Filesize

      4KB

    • memory/1780-0-0x000000000043B000-0x000000000043D000-memory.dmp

      Filesize

      8KB

    • memory/1780-2-0x0000000000400000-0x0000000000426000-memory.dmp

      Filesize

      152KB

    • memory/1780-3-0x0000000000400000-0x0000000000426000-memory.dmp

      Filesize

      152KB

    • memory/1780-5-0x0000000000240000-0x0000000000241000-memory.dmp

      Filesize

      4KB

    • memory/1780-4-0x00000000003D0000-0x00000000003F6000-memory.dmp

      Filesize

      152KB

    • memory/1780-6-0x00000000003D0000-0x00000000003F6000-memory.dmp

      Filesize

      152KB