Analysis
-
max time kernel
60s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
11-07-2022 17:27
Static task
static1
Behavioral task
behavioral1
Sample
102755.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
102755.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
TXRTN_4654211.lnk
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
TXRTN_4654211.lnk
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
WindowsCodecs.dll
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
WindowsCodecs.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
calc.exe
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
calc.exe
Resource
win10v2004-20220414-en
General
-
Target
calc.exe
-
Size
758KB
-
MD5
60b7c0fead45f2066e5b805a91f4f0fc
-
SHA1
9018a7d6cdbe859a430e8794e73381f77c840be0
-
SHA256
80c10ee5f21f92f89cbc293a59d2fd4c01c7958aacad15642558db700943fa22
-
SHA512
68b9f9c00fc64df946684ce81a72a2624f0fc07e07c0c8b3db2fae8c9c0415bd1b4a03ad7ffa96985af0cc5e0410f6c5e29a30200efff21ab4b01369a3c59b58
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
calc.exedescription pid process target process PID 780 wrote to memory of 1224 780 calc.exe regsvr32.exe PID 780 wrote to memory of 1224 780 calc.exe regsvr32.exe PID 780 wrote to memory of 1224 780 calc.exe regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1224-130-0x0000000000000000-mapping.dmp