Analysis

  • max time kernel
    74s
  • max time network
    70s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    30-07-2021 15:25

General

  • Target

    3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe

  • Size

    1.1MB

  • MD5

    1ee5c7e3b59f02fef1b0f793d2196afd

  • SHA1

    3f1a1ce12dec33f946079a532ccda8e0c72f2c7c

  • SHA256

    3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b

  • SHA512

    0d106c3451f88ed8f27abe47917c4ba4b25706df623f3a0879c5a67c09a269a48b35b94ca25fc2cb7447be75a7e05cbf5464f4c1aff80224c20f263d321387be

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe
    "C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:340
    • C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe
      "C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      PID:568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/340-60-0x0000000000C20000-0x0000000000C21000-memory.dmp

    Filesize

    4KB

  • memory/340-62-0x0000000004550000-0x0000000004551000-memory.dmp

    Filesize

    4KB

  • memory/340-63-0x00000000004F0000-0x000000000050B000-memory.dmp

    Filesize

    108KB

  • memory/340-64-0x0000000008040000-0x00000000080D0000-memory.dmp

    Filesize

    576KB

  • memory/340-65-0x00000000053E0000-0x000000000542B000-memory.dmp

    Filesize

    300KB

  • memory/568-66-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/568-67-0x00000000004025AC-mapping.dmp

  • memory/568-70-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB