Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
06/07/2024, 23:39
General
-
Target
7a2e97fee838b034cf1084d50df14ecf092b2ed6a50ea033d21a207141da26e1.exe
-
Size
579KB
-
MD5
e52a4df44920b2c3b0a65055ce859e3b
-
SHA1
058a564f1fededc40d2d146a7ddd2fa9db4b61d5
-
SHA256
7a2e97fee838b034cf1084d50df14ecf092b2ed6a50ea033d21a207141da26e1
-
SHA512
81283d40538149b90daa7353467daac2ccba76a38f5b5f8572cb3a7324c9f63dd12c92f5d9d719a203e7beada65375673092cdeaa0d41e5294e827ebcde1c4e9
-
SSDEEP
12288:MNdsd8uN4lf+wxqkAhGKYvc8v9881CD6VQ5zCD4VZRDGWF1m3aYhOA6eXV:4s2656VQ5zY431CaYAeXV
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a2e97fee838b034cf1084d50df14ecf092b2ed6a50ea033d21a207141da26e1.exe"C:\Users\Admin\AppData\Local\Temp\7a2e97fee838b034cf1084d50df14ecf092b2ed6a50ea033d21a207141da26e1.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7a2e97fee838b034cf1084d50df14ecf092b2ed6a50ea033d21a207141da26e1.exeC:\Users\Admin\AppData\Local\Temp\7a2e97fee838b034cf1084d50df14ecf092b2ed6a50ea033d21a207141da26e1.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
579KB
MD5c2030d4b6ae5f239aab59846f715d53f
SHA1c8c49d6bc37276fd064463acd66452c4453df862
SHA2563b46140415b6906dd2985ac59f31804314deee4f6df6c2409fb5aec0c163784b
SHA5126115403cf6bf82be2cd25585d108c9fbced4a8413dcb7003b0dfc308b60dab2c2e9ab9f09cc385131fe967f0743eb681338b5a929f00deb45ed7cb8595165f64
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
104KB
-
Filesize
260KB