Overview

overview

1

Static

static

386f4d4232...9a.exe

windows7-x64

1

386f4d4232...9a.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2022, 13:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    386f4d4232694320ef02c527f2a3293298a342e21e8d9361eb398d0636782d9a.exe

  • Size

    109KB

  • MD5

    0dd9ef9628a788fd18de443540caee50

  • SHA1

    4a39c20191b943d4a134e4d677524ce93e7e6686

  • SHA256

    386f4d4232694320ef02c527f2a3293298a342e21e8d9361eb398d0636782d9a

  • SHA512

    bc1283cbc6059d88a617ad8d10549e4ea81314ccbb3572e99f265fca5a8038c54fd61828677dfd099b64c13fe61c533c9be0d1fdbfe95aa7ea15106a558e14f8

  • SSDEEP

    1536:yL/jAgOlvUpfpTRaXFTwzqx+uV1r/US+pBc6e6HEEH5HABwuWsGR:yL7Agvcizqx+6NGBc63EEH5H3sGR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\386f4d4232694320ef02c527f2a3293298a342e21e8d9361eb398d0636782d9a.exe
    "C:\Users\Admin\AppData\Local\Temp\386f4d4232694320ef02c527f2a3293298a342e21e8d9361eb398d0636782d9a.exe"
    1⤵
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of UnmapMainImage
    • Suspicious use of WriteProcessMemory
    PID:1392
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:1968

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1392-54-0x0000000075521000-0x0000000075523000-memory.dmp

            Filesize

            8KB

            Download

          • memory/1392-57-0x0000000000400000-0x0000000000413000-memory.dmp

            Filesize

            76KB

            Download

          • memory/1392-58-0x0000000000250000-0x0000000000263000-memory.dmp

            Filesize

            76KB

            Download

          • memory/1968-59-0x0000000000860000-0x0000000000868000-memory.dmp

            Filesize

            32KB

            Download

          • memory/1968-60-0x0000000000080000-0x0000000000091000-memory.dmp

            Filesize

            68KB

            Download

          • memory/1968-61-0x0000000000270000-0x00000000002F0000-memory.dmp

            Filesize

            512KB

            Download