Overview

overview

1

Static

static

e17263ee25...fd.exe

windows7-x64

1

e17263ee25...fd.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2022, 09:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    e17263ee25e9ad9fe465c6ce43d3816854607ccf747a48e65107efcc7ff128fd.exe

  • Size

    100KB

  • MD5

    20041dbaf6980c6b5f6aff4fccf06250

  • SHA1

    c6da4d179b6bfd85eb86effc1d94127f57dd3e1d

  • SHA256

    e17263ee25e9ad9fe465c6ce43d3816854607ccf747a48e65107efcc7ff128fd

  • SHA512

    1d7c40970371835cc6a029b64f7b0e320b4c5147eb393b51969a2cbea6293a206de3db43167df93c027984352fa102b5752f58a594fc4b3a8bf71d310b664f53

  • SSDEEP

    1536:SDIV19MYWPdtA3uFnePo3DuMzOe9VJYM0WCI132Pabzyc25nQqH4aor5R5R:sIV19mtr0cHzlHXCk7m15nQyfCfR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e17263ee25e9ad9fe465c6ce43d3816854607ccf747a48e65107efcc7ff128fd.exe
    "C:\Users\Admin\AppData\Local\Temp\e17263ee25e9ad9fe465c6ce43d3816854607ccf747a48e65107efcc7ff128fd.exe"
    1⤵
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of WriteProcessMemory
    PID:4628
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:640

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/640-135-0x0000000000800000-0x000000000080E000-memory.dmp

            Filesize

            56KB

            Download

          • memory/640-136-0x00000000009C0000-0x00000000009D1000-memory.dmp

            Filesize

            68KB

            Download

          • memory/640-137-0x00000000011D0000-0x0000000001250000-memory.dmp

            Filesize

            512KB

            Download

          • memory/4628-133-0x0000000000400000-0x0000000000413000-memory.dmp

            Filesize

            76KB

            Download

          • memory/4628-134-0x00000000006E0000-0x00000000006F3000-memory.dmp

            Filesize

            76KB

            Download