Analysis

  • max time kernel
    144s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 14:46

General

  • Target

    239227a30db49b79292d020480df297d860eab3bbe595c93484ee08442890c71.exe

  • Size

    529KB

  • MD5

    1ce5cf0611e484fd52645a1d70e4b1af

  • SHA1

    f4a06273f0d540b3b1326beae573a11f875158e3

  • SHA256

    239227a30db49b79292d020480df297d860eab3bbe595c93484ee08442890c71

  • SHA512

    2e470c3df2abaf6ba178e256d038bb215ed7396d5115f7093e0fbe3c53b1b8b462dfe8cb2b6f1865ef5e8a4f10c1b46fa2d6cab9385ed47b0a3a868a6c0b44ff

  • SSDEEP

    12288:jF+e09OJluNUtvEEO86YGPTe2EdMwTVjRJ49dFgaKfH/bvwROB:jgeDJaPWGPTe2iV1S9dcfHjvwAB

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\239227a30db49b79292d020480df297d860eab3bbe595c93484ee08442890c71.exe
    "C:\Users\Admin\AppData\Local\Temp\239227a30db49b79292d020480df297d860eab3bbe595c93484ee08442890c71.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4812
    • C:\Users\Admin\AppData\Local\Temp\239227a30db49b79292d020480df297d860eab3bbe595c93484ee08442890c71.exe
      start
      2⤵
        PID:3312
      • C:\Users\Admin\AppData\Local\Temp\239227a30db49b79292d020480df297d860eab3bbe595c93484ee08442890c71.exe
        watch
        2⤵
          PID:924

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/924-132-0x0000000000000000-mapping.dmp

      • memory/924-136-0x0000000000400000-0x000000000048E000-memory.dmp

        Filesize

        568KB

      • memory/924-139-0x0000000000400000-0x000000000048E000-memory.dmp

        Filesize

        568KB

      • memory/3312-133-0x0000000000000000-mapping.dmp

      • memory/3312-135-0x0000000000400000-0x000000000048E000-memory.dmp

        Filesize

        568KB

      • memory/3312-137-0x0000000000400000-0x000000000048E000-memory.dmp

        Filesize

        568KB

      • memory/3312-138-0x0000000000400000-0x000000000048E000-memory.dmp

        Filesize

        568KB

      • memory/4812-134-0x0000000000400000-0x000000000048E000-memory.dmp

        Filesize

        568KB