Analysis

  • max time kernel
    154s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 14:40

General

  • Target

    2f47dba3bbc3f4ea2f1db4cb96f9d259a854c0de7d4c61bf3947f5b540406e71.exe

  • Size

    526KB

  • MD5

    2e495bbb0a1e0069e0d8567bc962caed

  • SHA1

    34b38c5b4817359801fb0b9285935dcab6297b24

  • SHA256

    2f47dba3bbc3f4ea2f1db4cb96f9d259a854c0de7d4c61bf3947f5b540406e71

  • SHA512

    e9fdbeb787be88ab5cfa3edc489dc77a467dd11cb2071fba7b38b0b9d7f7de70134a11de8a979b9416c67f781a61516e1923ca2e49076e1b3f824966ba588ca9

  • SSDEEP

    12288:op23AorQoPqV1Pq1ZBjW40KgozQ0Ue8xgL6C:oEjEoyV1ypq4aoMZ9xgL

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f47dba3bbc3f4ea2f1db4cb96f9d259a854c0de7d4c61bf3947f5b540406e71.exe
    "C:\Users\Admin\AppData\Local\Temp\2f47dba3bbc3f4ea2f1db4cb96f9d259a854c0de7d4c61bf3947f5b540406e71.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4076
    • C:\Users\Admin\AppData\Local\Temp\2f47dba3bbc3f4ea2f1db4cb96f9d259a854c0de7d4c61bf3947f5b540406e71.exe
      tear
      2⤵
        PID:2952

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2952-132-0x0000000000000000-mapping.dmp

    • memory/2952-134-0x0000000000400000-0x0000000000490000-memory.dmp

      Filesize

      576KB

    • memory/2952-135-0x0000000000400000-0x0000000000490000-memory.dmp

      Filesize

      576KB

    • memory/2952-136-0x0000000000400000-0x0000000000490000-memory.dmp

      Filesize

      576KB

    • memory/4076-133-0x0000000000400000-0x0000000000490000-memory.dmp

      Filesize

      576KB