Analysis

  • max time kernel
    166s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220112
  • submitted
    22/02/2022, 20:34

General

  • Target

    0c06af7031887451fac43d84612ecb9631260ed2e1db3a37fb759297c882132b.exe

  • Size

    781KB

  • MD5

    3486c36d780034424c378ca3a36560a5

  • SHA1

    d10835a745df0d09270764ad537cd96764f85fb9

  • SHA256

    0c06af7031887451fac43d84612ecb9631260ed2e1db3a37fb759297c882132b

  • SHA512

    1542651ec9440669baeef422cbfe995187149d45321898d8f5c044bb7089b1aa6d5578a9596310d51bac30063716ad7bd890e95653e7de44f12c4f3810683835

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c06af7031887451fac43d84612ecb9631260ed2e1db3a37fb759297c882132b.exe
    "C:\Users\Admin\AppData\Local\Temp\0c06af7031887451fac43d84612ecb9631260ed2e1db3a37fb759297c882132b.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Windows\SysWOW64\fondue.exe
      "C:\Windows\system32\fondue.exe" /enable-feature:NetFx3 /caller-name:mscoreei.dll
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2156
      • C:\Windows\system32\FonDUE.EXE
        "C:\Windows\sysnative\FonDUE.EXE" /enable-feature:NetFx3 /caller-name:mscoreei.dll
        3⤵
          PID:2660

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads