Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
01/07/2024, 16:22
General
-
Target
5f2f5fb941f984bf653488a0fa0f526aff474607b581dfb1320d3a3913533290.exe
-
Size
1.6MB
-
MD5
31987d67a66655975912932ae0bdef4f
-
SHA1
35647ead056464b3f93580c5f096dcf6a5ef8a4f
-
SHA256
5f2f5fb941f984bf653488a0fa0f526aff474607b581dfb1320d3a3913533290
-
SHA512
157c3048b4c49432a8d819cde081d21402ed20047a07b16c4fb916df0625151d4f205321c4a17951078b8928cbf8b428d0b906d7766b2c122c24f160ab6dec76
-
SSDEEP
24576:bmfiul/z3Jc10qkVEmUBtE7P5yRG65ZGaiwPw97AbaC0tiQ6WK6oAyLLvX2ovHCv:uiCrJIy7BqG65967DCU+WcGovHHZc
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f2f5fb941f984bf653488a0fa0f526aff474607b581dfb1320d3a3913533290.exe"C:\Users\Admin\AppData\Local\Temp\5f2f5fb941f984bf653488a0fa0f526aff474607b581dfb1320d3a3913533290.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-CG0SJ.tmp\5f2f5fb941f984bf653488a0fa0f526aff474607b581dfb1320d3a3913533290.tmp"C:\Users\Admin\AppData\Local\Temp\is-CG0SJ.tmp\5f2f5fb941f984bf653488a0fa0f526aff474607b581dfb1320d3a3913533290.tmp" /SL5="$30130,855256,729600,C:\Users\Admin\AppData\Local\Temp\5f2f5fb941f984bf653488a0fa0f526aff474607b581dfb1320d3a3913533290.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD5077cb4461a2767383b317eb0c50f5f13
SHA1584e64f1d162398b7f377ce55a6b5740379c4282
SHA2568287d0e287a66ee78537c8d1d98e426562b95c50f569b92cea9ce36a9fa57e64
SHA512b1fcb0265697561ef497e6a60fcee99dc5ea0cf02b4010da9f5ed93bce88bdfea6bfe823a017487b8059158464ea29636aad8e5f9dd1e8b8a1b6eaaab670e547
-
Filesize
2.9MB
MD5bcca51b93682f25f0b2a86d7eb17c674
SHA1dde33e04dea1153ae2a1c7e0e35d5741b71aa212
SHA2565239482dfa411be60c6c22acf3af19ac3c3852dc2cbead90062917d128dca271
SHA512f0fcf7772937b79183ab7496ace7c35e7ab548f8128f7e4a6b9d59a35f641958df433a21aef05a5179120d0688afe27a5ba21826b495aa4a34526027874497d7
-
Filesize
668KB
-
Filesize
764KB
-
Filesize
764KB
-
Filesize
3.0MB
-
Filesize
3.0MB