Overview

overview

3

Static

static

3

09674299.exe

windows7-x64

1

09674299.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-06-2023 10:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    09674299.exe

  • Size

    1.7MB

  • MD5

    db28898ba98f78ef5f06d1284ee2c63b

  • SHA1

    6a103c881f62ab13d92d2f09cb286a583cb311cf

  • SHA256

    59b3e11d61f5fdaab71497200fe528d981a39bc2985ab2c04380bada2492c786

  • SHA512

    b68ba191e26d1326c5d7a015427effc0f84c7fc6befd39202d67e04e8b8423ad375b6df3f6bc8f9d17ad10ec08a50fcc64a62728e102ee4fab0ccfbf271f2079

  • SSDEEP

    49152:/S2T/3NwBmwVLww6SwwwwwFJQwEv/w7g83VAxHbd+jIvJUgyDdy1qBG+hfIMRg5F:aO3NwBmwVLww6SwwwwwFJQwEnwRAxHb7

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\09674299.exe
    "C:\Users\Admin\AppData\Local\Temp\09674299.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5036
    • C:\Windows\system32\cmd.exe
      "C:\Windows\sysnative\cmd" /c "C:\Users\Admin\AppData\Local\Temp\7D33.tmp\7D34.tmp\7D35.bat C:\Users\Admin\AppData\Local\Temp\09674299.exe"
      2⤵
        PID:1704

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\7D33.tmp\7D34.tmp\7D35.bat
      Filesize

      1KB

      MD5

      19513b2221b127a9c0021d08ab5730b4

      SHA1

      8306659cfc7b1d425fd893b680504189a86b21c0

      SHA256

      79ea70ad5b5865cb621f3cea7cb8199ec870830d02dd727be5b6b69aae543edd

      SHA512

      99c5e11bb7e79eb2cc08580322ac639623a7cf15f97775709f3abb56b774a69007b2df3918af57a994def8dd060651cced92668e71b30cf1d7c573732a19ff95

      Download Submit