bf8b455cc351263446a8a1afc1f2461d2cbcfca273aaa6be24c22afacd6f281a | Triage™

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
09/07/2022, 10:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cbfa2e4458747eecb05c8813a94700b2.exe
Size 691KB
Sample220709-mkc55sgcb4
SHA256 bf8b455cc351263446a8a1afc1f2461d2cbcfca273aaa6be24c22afacd6f281a
MD5 cbfa2e4458747eecb05c8813a94700b2
SHA1 77ace1902d0fb55a916fd825a24bd4bfa2527cf4
SHA512 0465c70a4d9409bcfc10f397e3086d96164aac6b777fbb63d9e67b939e22f253e6a3ea11c9323cc3c7a895b0b1bed4d6df3450bae2e47459664aa896ba205c9e
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 904 wrote to memory of 1688	904	cbfa2e4458747eecb05c8813a94700b2.exe	28
PID 904 wrote to memory of 1688	904	cbfa2e4458747eecb05c8813a94700b2.exe	28
PID 904 wrote to memory of 1688	904	cbfa2e4458747eecb05c8813a94700b2.exe	28
PID 904 wrote to memory of 1688	904	cbfa2e4458747eecb05c8813a94700b2.exe	28

C:\Users\Admin\AppData\Local\Temp\cbfa2e4458747eecb05c8813a94700b2.exe
"C:\Users\Admin\AppData\Local\Temp\cbfa2e4458747eecb05c8813a94700b2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:904
- C:\Users\Admin\AppData\Local\Temp\cbfa2e4458747eecb05c8813a94700b2.exe
  "C:\Users\Admin\AppData\Local\Temp\cbfa2e4458747eecb05c8813a94700b2.exe"
  2⤵
  PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads