Overview

overview

1

Static

static

543f00bebd...f2.exe

windows7-x64

1

543f00bebd...f2.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    90s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2022 07:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    543f00bebd9117a9ecc3cbfec4bbd4b5e6a9b59791649ee812bee028ec03d6f2.exe

  • Size

    129KB

  • MD5

    7746a9437ea5bcb9d9d4c7131ba07381

  • SHA1

    e4960abe7cdf884861cef026045b0f76fca1c49a

  • SHA256

    543f00bebd9117a9ecc3cbfec4bbd4b5e6a9b59791649ee812bee028ec03d6f2

  • SHA512

    55024059ecda3253cf2dd1d1dc7a64ddb5ab70b98ee8efba9ba4b441b88f0329218bbae48059d08e31ade13c2fa171df4301533c615d9971018ac58efb842d20

  • SSDEEP

    3072:nVydYqZcmBr4jI6PXAVwaYbu/RL4YHDPz6DRCDC:MKqZcU8YcM4YHzWo

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\543f00bebd9117a9ecc3cbfec4bbd4b5e6a9b59791649ee812bee028ec03d6f2.exe
    "C:\Users\Admin\AppData\Local\Temp\543f00bebd9117a9ecc3cbfec4bbd4b5e6a9b59791649ee812bee028ec03d6f2.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    • Suspicious use of WriteProcessMemory
    PID:1500
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:1280

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1280-133-0x0000000000000000-mapping.dmp

      Download

    • memory/1500-132-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

      Download

    • memory/1500-134-0x0000000000400000-0x0000000000414000-memory.dmp

      Filesize

      80KB

      Download