Analysis

  • max time kernel
    42s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    05/12/2022, 06:19

General

  • Target

    f92ea7663421a07b4e898c4bc898f50ba0a13f1834499a451edeee14e8a90568.exe

  • Size

    443KB

  • MD5

    cdb6325126fee73a8955a420fa86cb00

  • SHA1

    18c8bb5f24a74d12a3104cc2c6ccb809351f8b8a

  • SHA256

    f92ea7663421a07b4e898c4bc898f50ba0a13f1834499a451edeee14e8a90568

  • SHA512

    3792d1d5766430dde3e4058e0e76cc2af3b1e67f24e9052dd1affe26801886f19662f93bb3283a0fc0f58481a67e731c7793077ecf84b2c77e489cae21e5dd6a

  • SSDEEP

    12288:YNIVQzhepwbRzLU6rhlFVwym9KSFm9MbbPZILP:YqwMpRAvzSkAhILP

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f92ea7663421a07b4e898c4bc898f50ba0a13f1834499a451edeee14e8a90568.exe
    "C:\Users\Admin\AppData\Local\Temp\f92ea7663421a07b4e898c4bc898f50ba0a13f1834499a451edeee14e8a90568.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of WriteProcessMemory
    PID:932
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" ¨Á
      2⤵
        PID:1136

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/932-54-0x0000000075A81000-0x0000000075A83000-memory.dmp

            Filesize

            8KB

          • memory/932-55-0x0000000000400000-0x00000000004CFF7E-memory.dmp

            Filesize

            831KB

          • memory/932-56-0x0000000000400000-0x00000000004CFF7E-memory.dmp

            Filesize

            831KB