Analysis

  • max time kernel
    41s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    23-05-2022 19:44

General

  • Target

    01762efb2998c96c12b63c786096ef48fc67b58f97e8c751794e1534f2d0ae4e.exe

  • Size

    169KB

  • MD5

    793bc8dbdbd028c4c7489f1145339549

  • SHA1

    ab3e79c15ff204c6bd68bb555f1d918476e51f2d

  • SHA256

    01762efb2998c96c12b63c786096ef48fc67b58f97e8c751794e1534f2d0ae4e

  • SHA512

    fa19a66e5a3ac3b62a11124119aa0fdd7606cb15c57a7060dca1ecd621ceefd3204e49865ac65bc2691e00db6ef0c25a51d67c28b8bb56d5db9c103e7e14623b

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 13 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\01762efb2998c96c12b63c786096ef48fc67b58f97e8c751794e1534f2d0ae4e.exe
    "C:\Users\Admin\AppData\Local\Temp\01762efb2998c96c12b63c786096ef48fc67b58f97e8c751794e1534f2d0ae4e.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Users\Admin\AppData\Local\Temp\01762efb2998c96c12b63c786096ef48fc67b58f97e8c751794e1534f2d0ae4e.exe
      "C:\Users\Admin\AppData\Local\Temp\01762efb2998c96c12b63c786096ef48fc67b58f97e8c751794e1534f2d0ae4e.exe"
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1320-64-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-70-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-71-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-67-0x0000000000404BA0-mapping.dmp

  • memory/1320-66-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-63-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-61-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-59-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-57-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/1320-56-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/2016-54-0x0000000075F21000-0x0000000075F23000-memory.dmp

    Filesize

    8KB

  • memory/2016-55-0x0000000074D40000-0x00000000752EB000-memory.dmp

    Filesize

    5.7MB