Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 02:58

General

  • Target

    cbd2dd139c457413bc4325d1896565d49141bdfffbfd2d39a6cc83adde36f969.exe

  • Size

    1.1MB

  • MD5

    9363850d81af82ac986c4ad6402dfc1b

  • SHA1

    533f3131cbdbd4157e1d0f690e8b950242d65181

  • SHA256

    cbd2dd139c457413bc4325d1896565d49141bdfffbfd2d39a6cc83adde36f969

  • SHA512

    a786787757259028633992f51791105b19536756cb2ff23f6fb97707d43aed51ad01bf23c7aecf836df1a4b94080837099910826257e706fec5ef16aebbf6286

  • SSDEEP

    24576:6aOKfphh6kun8ragzYhaVIhLZmJ1VUZmMkHcbhjsq1C+D1et3/fTnKHlhxtUMOTk:6aOephhJu8ragzYUVkZmjiZmMkHcbNsu

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cbd2dd139c457413bc4325d1896565d49141bdfffbfd2d39a6cc83adde36f969.exe
    "C:\Users\Admin\AppData\Local\Temp\cbd2dd139c457413bc4325d1896565d49141bdfffbfd2d39a6cc83adde36f969.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1440
    • C:\Users\Admin\AppData\Local\Temp\6E2E.tmp
      "C:\Users\Admin\AppData\Local\Temp\6E2E.tmp"
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2204

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\6E2E.tmp

          Filesize

          1.1MB

          MD5

          8272848a58fc446feee2c53361c070ae

          SHA1

          f1d821148890db9a831acdf1ab5b1859b0d65b60

          SHA256

          4e8725aa2959b87336ca7f81e79168bf0811d1ae159af5b98b57ceb433a746ab

          SHA512

          5244b0f68b65d5babb5b9a5bcf8351d315dc5db048fe8d7058973dfa9d1190f93b47bc24d3f9c573325e26a496083e116ec023a9cdaca5f35a872e6c42ac61c8