da590596d93db3f91badc48726a309360ee337f5bcef5d96c3f6abdf355ff468 | Triage™

Analysis

max time kernel
4264958s
max time network
13s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
17/01/2022, 23:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
334bd0d7604d36d51e1182409ee14624.exe
Size 255KB
Sample220117-3q514seaa9
SHA256 da590596d93db3f91badc48726a309360ee337f5bcef5d96c3f6abdf355ff468
MD5 334bd0d7604d36d51e1182409ee14624
SHA1 e005d7fa0c608039d2e8f446822fe20e22d5877e
SHA512 7095a2128da211e3d5a0dfae820597f5db4f0a476a5339cf8e4a5a541eef746d6bf59cbe54f3281253f3b1f5b3d35a2b274410894d40e519cf677f7b3234e8a3
MD5 SHA1 SHA512

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2244 set thread context of 1960	2244	334bd0d7604d36d51e1182409ee14624.exe	54

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 1960	2244	334bd0d7604d36d51e1182409ee14624.exe	54
PID 2244 wrote to memory of 1960	2244	334bd0d7604d36d51e1182409ee14624.exe	54
PID 2244 wrote to memory of 1960	2244	334bd0d7604d36d51e1182409ee14624.exe	54
PID 2244 wrote to memory of 1960	2244	334bd0d7604d36d51e1182409ee14624.exe	54
PID 2244 wrote to memory of 1960	2244	334bd0d7604d36d51e1182409ee14624.exe	54

C:\Users\Admin\AppData\Local\Temp\334bd0d7604d36d51e1182409ee14624.exe
"C:\Users\Admin\AppData\Local\Temp\334bd0d7604d36d51e1182409ee14624.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Users\Admin\AppData\Local\Temp\334bd0d7604d36d51e1182409ee14624.exe
  2⤵
  PID:1960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1960-131-0x0000000000400000-0x000000000040F000-memory.dmp

Download

memory/1960-132-0x0000000000400000-0x000000000040F000-memory.dmp

Download