Analysis
-
max time kernel
101s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
06-07-2024 22:34
General
-
Target
uninstall.exe
-
Size
39KB
-
MD5
32016c508d1250ba7f8c11b11a9fef68
-
SHA1
aec3ef43e9f69043e5d90beffe418473185fbbb2
-
SHA256
bec346b8267012f8235b093f2917a347833e44833fdfea241c640d77dd323414
-
SHA512
61e126c32c4817395776dd8bfbe29fbf5c30943cb73b8fe9690a8aa99c229e3c201f38940b6a91fa88eb876c13f844b0f452b1f7722fab692a7b75b6c216a225
-
SSDEEP
768:6G0D3L09yOJRZHR8Wm8REzAwtbTBu4VVhG5b5PIAIYHLLE8JlsTFqk9WBm:6G0Db1wJdBREzA01xVubM8Jlbk92m
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
NSIS installer 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\uninstall.exe"C:\Users\Admin\AppData\Local\Temp\uninstall.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\A~NSISu_.exe"C:\Users\Admin\AppData\Local\Temp\A~NSISu_.exe" _?=C:\Users\Admin\AppData\Local\Temp\2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39KB
MD532016c508d1250ba7f8c11b11a9fef68
SHA1aec3ef43e9f69043e5d90beffe418473185fbbb2
SHA256bec346b8267012f8235b093f2917a347833e44833fdfea241c640d77dd323414
SHA51261e126c32c4817395776dd8bfbe29fbf5c30943cb73b8fe9690a8aa99c229e3c201f38940b6a91fa88eb876c13f844b0f452b1f7722fab692a7b75b6c216a225