b653631708cdf4b2ec872b4dca10f3c23380c7a2b2029e20f23b590602d1bcfe | Triage

Resubmissions

06/07/2023, 18:35

230706-w8fqlsdg43 7

06/07/2023, 18:32

230706-w6mfdadg35 7

06/07/2023, 18:27

230706-w34kgsdg32 7

05/07/2023, 09:21

230705-lbqjfabd66 7

05/07/2023, 08:59

230705-kxxdfach7v 7

05/07/2023, 08:41

230705-klwmrscg9y 7

05/07/2023, 07:15

230705-h3aqhscf6z 7

05/07/2023, 07:13

230705-h2e9lsba95 7

05/07/2023, 06:50

230705-hl6fvscf2t 7

Analysis

max time kernel
23s
max time network
32s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
06/07/2023, 18:27

Sharing

Report Analysis Logs

General

Target

Bariol-Bold.ttf
Size

81KB
MD5

fce74d79a149be212bde9b93c7513ee0
SHA1

248bd1d518ea90c836d7f49e3a8f5601ca809e64
SHA256

f57bab3180b040c9d519b15ce97ef684d454e0961e07a1d157944406e49d423e
SHA512

5da8ff39bf96bfbb548c80a3c4ab49f45bd8a0b0ff8c69f841848bb78c3baf82882db588d505c0994197b143a3e26c0e7c65484ed859b0a20850b180c661050d
SSDEEP

1536:0OZnLPMB7Q5eAMWvDeQBL9cgrSlZaiHmWSwdGJD:tn4G51CARiZJGF

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 2064	2352	cmd.exe	29
PID 2352 wrote to memory of 2064	2352	cmd.exe	29
PID 2352 wrote to memory of 2064	2352	cmd.exe	29

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Bariol-Bold.ttf
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Windows\System32\fontview.exe
  "C:\Windows\System32\fontview.exe" C:\Users\Admin\AppData\Local\Temp\Bariol-Bold.ttf
  2⤵
  PID:2064

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads