Analysis

  • max time kernel
    55s
  • max time network
    118s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    30-07-2021 15:25

General

  • Target

    3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe

  • Size

    1.1MB

  • MD5

    1ee5c7e3b59f02fef1b0f793d2196afd

  • SHA1

    3f1a1ce12dec33f946079a532ccda8e0c72f2c7c

  • SHA256

    3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b

  • SHA512

    0d106c3451f88ed8f27abe47917c4ba4b25706df623f3a0879c5a67c09a269a48b35b94ca25fc2cb7447be75a7e05cbf5464f4c1aff80224c20f263d321387be

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe
    "C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:3200
    • C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe
      "C:\Users\Admin\AppData\Local\Temp\3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      PID:4008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3200-114-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/3200-116-0x0000000004C10000-0x0000000004C11000-memory.dmp

    Filesize

    4KB

  • memory/3200-117-0x00000000051B0000-0x00000000051B1000-memory.dmp

    Filesize

    4KB

  • memory/3200-118-0x0000000004CB0000-0x0000000004CB1000-memory.dmp

    Filesize

    4KB

  • memory/3200-119-0x0000000004BB0000-0x0000000004BB1000-memory.dmp

    Filesize

    4KB

  • memory/3200-120-0x0000000004EA0000-0x0000000004EA1000-memory.dmp

    Filesize

    4KB

  • memory/3200-121-0x0000000004B70000-0x0000000004C0C000-memory.dmp

    Filesize

    624KB

  • memory/3200-122-0x0000000005180000-0x000000000519B000-memory.dmp

    Filesize

    108KB

  • memory/3200-123-0x0000000008620000-0x00000000086B0000-memory.dmp

    Filesize

    576KB

  • memory/3200-124-0x0000000008710000-0x000000000875B000-memory.dmp

    Filesize

    300KB

  • memory/4008-126-0x00000000004025AC-mapping.dmp

  • memory/4008-125-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB