cd0914bc8d8ee678a8b4de26b80b4a3ca079e3fe96bc2a6ed40989fcff100cac | Triage

Analysis

max time kernel
152s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 18:34

Sharing

Report Analysis Logs

General

Target

notification.exe
Size

124KB
MD5

bba602f3628f39f7d62edaa80cfddfe5
SHA1

c71bbfb24984c162e59e2ffbb8be69a5153af28b
SHA256

c00727651c323e461645821625a4f69a0b77bd157706373734f8ee24bc66bfca
SHA512

c6697b21b69b74da7d2e5cb1900eb95b4d4ed1d63172c956771821d960c7f3487039bd13fc6e049945c9d9db4cfb85e81a5d112758538e6e1ec0e40e33976200
SSDEEP

1536:iQOwPGF+Nn76jBwEMxqElwfGwCwFEMxqER6jBaNnU6j5zpIqq21XrH2b7Zm:B1PGsN72GwZrNb5x1b+A

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3340 set thread context of 2072	3340	notification.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3340	notification.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 3340 wrote to memory of 2072	3340	notification.exe	80
PID 3340 wrote to memory of 2072	3340	notification.exe	80
PID 3340 wrote to memory of 2072	3340	notification.exe	80
PID 3340 wrote to memory of 2072	3340	notification.exe	80
PID 3340 wrote to memory of 2072	3340	notification.exe	80
PID 3340 wrote to memory of 2072	3340	notification.exe	80
PID 3340 wrote to memory of 2072	3340	notification.exe	80

C:\Users\Admin\AppData\Local\Temp\notification.exe
"C:\Users\Admin\AppData\Local\Temp\notification.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3340
- C:\Users\Admin\AppData\Local\Temp\notification.exe
  "C:\Users\Admin\AppData\Local\Temp\notification.exe"
  2⤵
  PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2072-135-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download