8b9242cdae9f1f916e026e7e09620a4f1cfd702caad9312dcd8c60c7921ed30d | Triage

Resubmissions

12/01/2023, 21:43

230112-1k14vsbc62 1

12/01/2023, 21:26

230112-z95mxaeg2s 1

Analysis

max time kernel
150s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
12/01/2023, 21:26

Sharing

Report Analysis Logs

General

Target

onlinedrive.exe
Size

377KB
MD5

cf16b73c4bc8b0b3169def3145515c51
SHA1

d96122f40c613ec7569b0afa431670827b2b20f2
SHA256

8b9242cdae9f1f916e026e7e09620a4f1cfd702caad9312dcd8c60c7921ed30d
SHA512

b09080e5afd57afcbd78dde9ef707f7afb74afd04515d800b5e2e0f7832755131a1c1b7a1f32383e569c9945ffd7b73f9b4c44d9c3894e78093a3cb751310c8f
SSDEEP

6144:RZzN/DXrMBfOxw4do6fmdrb3JjvYF0loyZ:RZ1r4szdogmBRvYF0loyZ

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1544 wrote to memory of 1140	1544	onlinedrive.exe	27
PID 1544 wrote to memory of 1140	1544	onlinedrive.exe	27
PID 1544 wrote to memory of 1140	1544	onlinedrive.exe	27
PID 1544 wrote to memory of 1504	1544	onlinedrive.exe	29
PID 1544 wrote to memory of 1504	1544	onlinedrive.exe	29
PID 1544 wrote to memory of 1504	1544	onlinedrive.exe	29
PID 1544 wrote to memory of 596	1544	onlinedrive.exe	31
PID 1544 wrote to memory of 596	1544	onlinedrive.exe	31
PID 1544 wrote to memory of 596	1544	onlinedrive.exe	31
PID 1544 wrote to memory of 368	1544	onlinedrive.exe	33
PID 1544 wrote to memory of 368	1544	onlinedrive.exe	33
PID 1544 wrote to memory of 368	1544	onlinedrive.exe	33

C:\Users\Admin\AppData\Local\Temp\onlinedrive.exe
"C:\Users\Admin\AppData\Local\Temp\onlinedrive.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1544
- C:\Windows\system32\cmd.exe
  cmd
  2⤵
  PID:1140
- C:\Windows\system32\cmd.exe
  cmd
  2⤵
  PID:1504
- C:\Windows\system32\cmd.exe
  cmd
  2⤵
  PID:596
- C:\Windows\system32\cmd.exe
  cmd
  2⤵
  PID:368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads