Analysis

  • max time kernel
    91s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 17:21

General

  • Target

    45f5c9a30f3d18bc94b0e5cba01038c3be313a9eb3712b44ecf396aff5c83fb1.exe

  • Size

    521KB

  • MD5

    abf8b15748fd435d13d4091e69e8a5f6

  • SHA1

    4aad732b49df489f044a5fb04a5fb040f4ffb766

  • SHA256

    45f5c9a30f3d18bc94b0e5cba01038c3be313a9eb3712b44ecf396aff5c83fb1

  • SHA512

    90e84c68ce9f2a41f9d49709be45e28f0bb90ce71774f7d100a62903b964e67313d1c15c86f699229540b857145de5df837f0642dd4f04e44a5950445092829b

  • SSDEEP

    12288:Gw2HnJI9VU0QMhYMtmqTp5bXfuPGexGWRLU17:GnHnC9agyq1ZfuP9GWSl

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\45f5c9a30f3d18bc94b0e5cba01038c3be313a9eb3712b44ecf396aff5c83fb1.exe
    "C:\Users\Admin\AppData\Local\Temp\45f5c9a30f3d18bc94b0e5cba01038c3be313a9eb3712b44ecf396aff5c83fb1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3464
    • C:\Users\Admin\AppData\Local\Temp\45f5c9a30f3d18bc94b0e5cba01038c3be313a9eb3712b44ecf396aff5c83fb1.exe
      start
      2⤵
        PID:2704
      • C:\Users\Admin\AppData\Local\Temp\45f5c9a30f3d18bc94b0e5cba01038c3be313a9eb3712b44ecf396aff5c83fb1.exe
        watch
        2⤵
          PID:1660

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1660-133-0x0000000000000000-mapping.dmp

      • memory/1660-136-0x0000000000400000-0x000000000048B000-memory.dmp

        Filesize

        556KB

      • memory/1660-139-0x0000000000400000-0x000000000048B000-memory.dmp

        Filesize

        556KB

      • memory/2704-134-0x0000000000000000-mapping.dmp

      • memory/2704-137-0x0000000000400000-0x000000000048B000-memory.dmp

        Filesize

        556KB

      • memory/2704-138-0x0000000000400000-0x000000000048B000-memory.dmp

        Filesize

        556KB

      • memory/3464-132-0x0000000000400000-0x000000000048B000-memory.dmp

        Filesize

        556KB

      • memory/3464-135-0x0000000000400000-0x000000000048B000-memory.dmp

        Filesize

        556KB