Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-07-2024 16:13

General

  • Target

    igccu.exe

  • Size

    638KB

  • MD5

    12c26ab43202d2ef17553eeb17376c2a

  • SHA1

    0b6226071ab1711bbbfaca2cdad6783d2658d797

  • SHA256

    cb56bffb224d9bcff0753d58995c25f6f944bcb075560019cd87283e3b443aa3

  • SHA512

    215e497f9ead486e618b940109553a703042cc0dcd7802cd7c36aac296ddfe27a5ce693891ed50e64dd68a03ba029928ab2c302a38de04e02e5ce3b3c0661f79

  • SSDEEP

    12288:RQi9zSYMvrOK9BOKjHol+yFnWVOjTPlxsU807BN/9+FJeyuAJMX7QYQ:RQiE7eORaEOjRxsUrLUoJi

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\igccu.exe
    "C:\Users\Admin\AppData\Local\Temp\igccu.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3840
    • C:\Users\Admin\AppData\Local\Temp\is-ADDLU.tmp\igccu.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-ADDLU.tmp\igccu.tmp" /SL5="$6029E,402740,84480,C:\Users\Admin\AppData\Local\Temp\igccu.exe"
      2⤵
      • Executes dropped EXE
      PID:4008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\is-ADDLU.tmp\igccu.tmp

    Filesize

    719KB

    MD5

    8ff731d01f86d5ff9a326e82823cc30c

    SHA1

    9062aa438887b1f2e22e42b1adf56971b5a7e6e8

    SHA256

    3228932ba90230ec52dac304fb9f155ba2df33dd6775093fb7f3d0ae83546a28

    SHA512

    c4a67479069757dabfec6c8c97850f07a1ad9ca33287a06c0075289d2259e12958df36716074c61492b0a0a11924e40bf1825751974c117a151112f85d560ecc

  • memory/3840-0-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB

  • memory/3840-2-0x0000000000401000-0x000000000040B000-memory.dmp

    Filesize

    40KB

  • memory/3840-11-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB

  • memory/4008-6-0x0000000000400000-0x00000000004C4000-memory.dmp

    Filesize

    784KB

  • memory/4008-12-0x0000000000400000-0x00000000004C4000-memory.dmp

    Filesize

    784KB