Analysis
-
max time kernel
101s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
10/07/2024, 07:43
General
-
Target
Uninstall.exe
-
Size
48KB
-
MD5
ddaf91d2382fdf1216f149ef6995218c
-
SHA1
613eafb979fe76ef57d4620da3405e3a3ee524a2
-
SHA256
e23be80bfa1661020f0b1210c082cb45bbf7908e1c315a09a21540601179ca0d
-
SHA512
e26e63c99a9121f6c289271d526726a751528bb2cce91b22ad408f91257c99f6d3dd0b21ad95b7785c57a4a1f5ae1e7a02255df9c8df31f4845f5f5166f2ef91
-
SSDEEP
768:k9qrF6FbV5v+rf2C+9ReyFJefClbu9svHtLE8JWj+eJRn5Am6kRRJ2iZ3igvDO:k8rF6Fjs2Buk40uJ8JlqAELVigvC
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
NSIS installer 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Uninstall.exe"C:\Users\Admin\AppData\Local\Temp\Uninstall.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\A~NSISu_.exe"C:\Users\Admin\AppData\Local\Temp\A~NSISu_.exe" _?=C:\Users\Admin\AppData\Local\Temp\2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
MD5ddaf91d2382fdf1216f149ef6995218c
SHA1613eafb979fe76ef57d4620da3405e3a3ee524a2
SHA256e23be80bfa1661020f0b1210c082cb45bbf7908e1c315a09a21540601179ca0d
SHA512e26e63c99a9121f6c289271d526726a751528bb2cce91b22ad408f91257c99f6d3dd0b21ad95b7785c57a4a1f5ae1e7a02255df9c8df31f4845f5f5166f2ef91