Analysis

  • max time kernel
    134s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7v200430
  • submitted
    09-07-2020 13:36

General

  • Target

    TNT INVOICE AND PACKING LIST_1.exe

  • Size

    1.5MB

  • MD5

    fff945c817bc37dfc7d9da5129f10d7c

  • SHA1

    4a31e2c8b5362300f8a0f77523c313954b89d7ba

  • SHA256

    ab261adafcaa48f8a9472a46e105f3a1a89f6b0291555e14448e445e058b9cc6

  • SHA512

    afd3cf1189b5e6e6a152b1c7ca1e29008cdd014499fba88041824051c2e0106c80d665daa0af559d8f35219a303b4094a537acdfca5ce4dba0e3d00b127a296e

Score
6/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 608 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Adds Run entry to start application 2 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TNT INVOICE AND PACKING LIST_1.exe
    "C:\Users\Admin\AppData\Local\Temp\TNT INVOICE AND PACKING LIST_1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    • Adds Run entry to start application
    PID:1412
    • C:\Program Files (x86)\internet explorer\ieinstal.exe
      "C:\Program Files (x86)\internet explorer\ieinstal.exe"
      2⤵
        PID:1392

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads