fb9476f4f464a596f5d54138d3c330d43b58c54c8cd44d0f555dc28ece97be67 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
16-07-2023 02:56

Sharing

Report Analysis Logs

General

Target

V2licenceEncryptor.exe
Size

391KB
MD5

aed92fa60ec66364a7ae811ca899d762
SHA1

115e229a93e404e1bc2636f9865c73bcd05d5aab
SHA256

fb9476f4f464a596f5d54138d3c330d43b58c54c8cd44d0f555dc28ece97be67
SHA512

2e0e7e03bdc6a033fcc68f1c33cd9dc47c8deb72ef15e7905dc72c25f411f3d97921cd45636663098e67ff723c53fc579f41b21fd60531d1a6dde9c5100a2e06
SSDEEP

6144:/Hcw9j9hBndpwYBlbp14Pe5uKQdgT9ORHud6F/S2ohXlkae8M:kw95hpjTd4eAq2oZeh

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2588 wrote to memory of 1412	2588	V2licenceEncryptor.exe	29
PID 2588 wrote to memory of 1412	2588	V2licenceEncryptor.exe	29
PID 2588 wrote to memory of 1412	2588	V2licenceEncryptor.exe	29

C:\Users\Admin\AppData\Local\Temp\V2licenceEncryptor.exe
"C:\Users\Admin\AppData\Local\Temp\V2licenceEncryptor.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:1412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads