Analysis

  • max time kernel
    153s
  • max time network
    170s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    29/11/2022, 07:15

General

  • Target

    7c458dee71aecc6723b235aa041d61eee59ef0e8ca59ac3b909e6696924b13e3.exe

  • Size

    201KB

  • MD5

    7f1edd72f99ced30b77aa76ac68bb28a

  • SHA1

    1cd17d89392e8f68639fab499f5d9feff872228a

  • SHA256

    7c458dee71aecc6723b235aa041d61eee59ef0e8ca59ac3b909e6696924b13e3

  • SHA512

    629e1e085dc7649dde024a277d124176cc420ccfbf33eb351a256ab3082e7ab6f9873332b3255750b0ef4121d986de6e8971af1f4de4372b0866fe37a0ee89c3

  • SSDEEP

    3072:+Ar1Sng2UToIdvUUnqeCQ5SFinnDqOer1H:+O1AUNvU8qeCPgnnWr1H

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c458dee71aecc6723b235aa041d61eee59ef0e8ca59ac3b909e6696924b13e3.exe
    "C:\Users\Admin\AppData\Local\Temp\7c458dee71aecc6723b235aa041d61eee59ef0e8ca59ac3b909e6696924b13e3.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    • Suspicious use of WriteProcessMemory
    PID:1156
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:1364

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1156-58-0x0000000000320000-0x0000000000334000-memory.dmp

            Filesize

            80KB

          • memory/1364-54-0x00000000000C0000-0x00000000000C9000-memory.dmp

            Filesize

            36KB

          • memory/1364-56-0x00000000000C0000-0x00000000000C9000-memory.dmp

            Filesize

            36KB

          • memory/1364-59-0x0000000000A10000-0x0000000000A18000-memory.dmp

            Filesize

            32KB

          • memory/1364-60-0x00000000000C0000-0x00000000000C9000-memory.dmp

            Filesize

            36KB