Analysis

  • max time kernel
    38s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2022, 15:38 UTC

General

  • Target

    d1ffe1b57aea3fb8ca0824725fd5ec9f6cd5140c8978e5ed78234a6249d15843.exe

  • Size

    266KB

  • MD5

    7b02b01eb6719a8af68a56edf87def49

  • SHA1

    787fc7f0d251a3a843a55211bb19266b8e110f4f

  • SHA256

    d1ffe1b57aea3fb8ca0824725fd5ec9f6cd5140c8978e5ed78234a6249d15843

  • SHA512

    3a93093cf63bc40da00049ff038ed3f28aecf8797605f45992ee00ae01b6bb59d0f207ea4657e646d3c78f6c165a4ef558edd4147fdd988ac5ea0fd054e4ddb8

  • SSDEEP

    6144:vSh47gVKEYcG5wb82h6Ha0SySpF6BzRhR4sdNx8+QEtyM:K/YcG5wb82h6SKhWGx8st

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d1ffe1b57aea3fb8ca0824725fd5ec9f6cd5140c8978e5ed78234a6249d15843.exe
    "C:\Users\Admin\AppData\Local\Temp\d1ffe1b57aea3fb8ca0824725fd5ec9f6cd5140c8978e5ed78234a6249d15843.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:780
    • C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
      dw20.exe -x -s 352
      2⤵
        PID:1976

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1976-55-0x000007FEFBD01000-0x000007FEFBD03000-memory.dmp

      Filesize

      8KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.