Overview

overview

8

Static

static

46aec4bddc...5b.exe

windows7_x64

8

46aec4bddc...5b.exe

windows10-2004_x64

8

Analysis

  • max time kernel
    4294183s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20220311-en
  • submitted
    19-03-2022 17:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.exe

  • Size

    1.0MB

  • MD5

    a834c2fb14754929ed71a2030e7bedd6

  • SHA1

    a43639f7a0d42df7fbd0794d0fb34e0fd41ccd3a

  • SHA256

    46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b

  • SHA512

    68f95422b309f6307cbd50b6d75731fd782522db479bac1a52c237ad89ee6344cbc2df619eaa87a888339cf6c9b2fccd8f102c38343735a259b96a9a06da6a6c

Score
8/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.exe
    "C:\Users\Admin\AppData\Local\Temp\46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2032
    • C:\Users\Admin\AppData\Local\Temp\is-SRJE0.tmp\46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-SRJE0.tmp\46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.tmp" /SL5="$4014A,828330,121344,C:\Users\Admin\AppData\Local\Temp\46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: GetForegroundWindowSpam
      PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\is-SRJE0.tmp\46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.tmp
    MD5

    0644ec89783e65d46f9a0f9bf45a74a1

    SHA1

    128bc2e629957469b99ebcd48f0a3161b06deece

    SHA256

    b99fd88bf24a3bb09cce2fa2003f68a285c903a0e79f88f272f23721675af66a

    SHA512

    79d08e228e044c75608e93c4981f3c73ca6cba40f78b79c42752869a2614dae4dea61aada54e78ea91de5c5c46f6a197ad59256494e52128db50198d0e7ff69f

    Download Submit
  • \Users\Admin\AppData\Local\Temp\is-SRJE0.tmp\46aec4bddcb10420cedb370205aec884f978b795b2080f8de24e47d810ea5f5b.tmp
    MD5

    0644ec89783e65d46f9a0f9bf45a74a1

    SHA1

    128bc2e629957469b99ebcd48f0a3161b06deece

    SHA256

    b99fd88bf24a3bb09cce2fa2003f68a285c903a0e79f88f272f23721675af66a

    SHA512

    79d08e228e044c75608e93c4981f3c73ca6cba40f78b79c42752869a2614dae4dea61aada54e78ea91de5c5c46f6a197ad59256494e52128db50198d0e7ff69f

    Download Submit
  • memory/2008-61-0x0000000000240000-0x0000000000241000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2032-54-0x0000000075801000-0x0000000075803000-memory.dmp
    Filesize

    8KB

    Download
  • memory/2032-55-0x0000000000400000-0x0000000000425000-memory.dmp
    Filesize

    148KB

    Download
  • memory/2032-57-0x0000000000400000-0x0000000000425000-memory.dmp
    Filesize

    148KB

    Download