Analysis
- max time kernel
137s - max time network
101s - platform
windows7_x64 - resource
win7v200430 - submitted
09/07/2020, 07:03
General
- Target c03aa61025ff9596ce8737d0071d62dc4bcd348d7e4a1d3cbd2bd205e0d6591c.exe
- Size 152KB
- Sample200709-2leek3g4ls
- SHA256 c03aa61025ff9596ce8737d0071d62dc4bcd348d7e4a1d3cbd2bd205e0d6591c
Score
8/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
- Executes dropped EXE 1 IoCs
- NTFS ADS 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c03aa61025ff9596ce8737d0071d62dc4bcd348d7e4a1d3cbd2bd205e0d6591c.exe"C:\Users\Admin\AppData\Local\Temp\c03aa61025ff9596ce8737d0071d62dc4bcd348d7e4a1d3cbd2bd205e0d6591c.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
- NTFS ADS
-
\??\c:\programdata\e6533cd889\bdif.exec:\programdata\e6533cd889\bdif.exe2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/992-5-0x00000000002B0000-0x00000000002C0000-memory.dmp
memory/992-6-0x00000000002C0000-0x00000000002E5000-memory.dmp
memory/1492-0-0x0000000000030000-0x0000000000040000-memory.dmp
memory/1492-1-0x0000000000230000-0x0000000000255000-memory.dmp