Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
30-06-2024 04:01
General
-
Target
ff4c3fd144699294305b98366a3262c3c9bdb00b3b55af6a629be7024a62f2f1.exe
-
Size
320KB
-
MD5
58d9221aebfba55f6e5403f53a8d1785
-
SHA1
240fd51c943851835b89ad63fef964874a1ef1c4
-
SHA256
ff4c3fd144699294305b98366a3262c3c9bdb00b3b55af6a629be7024a62f2f1
-
SHA512
61c6fee98c9c5c6e29b641bb3751ec2cfc78e8a2efc54206749741c7c9cc56ea6459a4d680730ba49da7cc286f99831eda2e6293d680c5d429f6070147e1da7e
-
SSDEEP
6144:Zg4hF4N6idPfG4DwbiM1G7wsyi4y3G1B7qV40saiigCD1:6kF4widGRV1G7wNiZG1BmVQ5zCD1
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff4c3fd144699294305b98366a3262c3c9bdb00b3b55af6a629be7024a62f2f1.exe"C:\Users\Admin\AppData\Local\Temp\ff4c3fd144699294305b98366a3262c3c9bdb00b3b55af6a629be7024a62f2f1.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ff4c3fd144699294305b98366a3262c3c9bdb00b3b55af6a629be7024a62f2f1.exeC:\Users\Admin\AppData\Local\Temp\ff4c3fd144699294305b98366a3262c3c9bdb00b3b55af6a629be7024a62f2f1.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
MD5375ec674a9930d8aa19651c5b22de5cf
SHA1443870264ae8f5895fb839acb6b43eeba2fd05d4
SHA25647c4d67edb3beda91a493c4a4bd660fcb309d5a41b00720319dc291e3898b1b8
SHA51224d3eaca1546b127b3bba3344d4f05113f3a19ee4ecc1717c3f46bab98209ae27f532ffe81009e222051edf04e3b1102ece5a8836827e3a06455707947106e96
-
Filesize
252KB
-
Filesize
104KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB