Analysis
- max time kernel
162s - max time network
180s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
29/11/2022, 04:30
General
- Target 9eba6cadf64f30313896e995672ee074530496f71a979e29c091b54885f49dd5.exe
- Size 97KB
- Sample221129-e5bttahh5v
- SHA256 9eba6cadf64f30313896e995672ee074530496f71a979e29c091b54885f49dd5
Score
1/10
Malware Config
Signatures
- Suspicious use of UnmapMainImage 1 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9eba6cadf64f30313896e995672ee074530496f71a979e29c091b54885f49dd5.exe"C:\Users\Admin\AppData\Local\Temp\9eba6cadf64f30313896e995672ee074530496f71a979e29c091b54885f49dd5.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2468-132-0x0000000000400000-0x0000000000426000-memory.dmp
memory/2468-134-0x0000000000400000-0x0000000000414000-memory.dmp
memory/2468-135-0x00000000004B0000-0x00000000004B3000-memory.dmp