Overview

overview

8

Static

static

4c837e9256...be.exe

windows7_x64

8

4c837e9256...be.exe

windows10_x64

8

Analysis

  • max time kernel
    61s
  • max time network
    124s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    17/11/2020, 12:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    4c837e9256490e2301081570205b26be.exe
  • Size 557KB
  • Sample201117-qhakqs1e3j
  • SHA256 6bfb41ac8df840797e06a7da047dd349e7c4dbf75804f4ef2f3a9eb06daa2e38
  • MD5 SHA1 SHA512
Score
8/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops startup file 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c837e9256490e2301081570205b26be.exe
    "C:\Users\Admin\AppData\Local\Temp\4c837e9256490e2301081570205b26be.exe"
    1⤵
    • Drops startup file
    • Suspicious use of WriteProcessMemory
    PID:3976
    • C:\Users\Admin\AppData\Roaming\Smart Clock\SmartClock.exe
      "C:\Users\Admin\AppData\Roaming\Smart Clock\SmartClock.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: AddClipboardFormatListener
      PID:2888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2888-4-0x0000000002230000-0x0000000002231000-memory.dmp
        Download

        memory/3976-0-0x0000000002240000-0x0000000002241000-memory.dmp
        Download