Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
22/07/2023, 03:48
General
-
Target
d13b979b1bd8830f093bb9aab1c3f80e.exe
-
Size
1024KB
-
MD5
d13b979b1bd8830f093bb9aab1c3f80e
-
SHA1
257d663cbcf39d0fe1315c9cbbd1a13eec5ecabe
-
SHA256
d147723c89539aa5c4cc1ffc41478111a4c058bee7c0faa73ef3c77294a997bb
-
SHA512
db716b288d0b31649362a124f820523998804f6bbb5006466e9af84b3aa0946f51fd9976daa2f7067554fc28ed832f7f6b1b3695789ebaf01d5769c9c68c30cb
-
SSDEEP
24576:ROCEhCCa2ruQpGU0WZnQNXeicIIKQ/CFO:ROC5NWZnQNXed1/CF
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d13b979b1bd8830f093bb9aab1c3f80e.exe"C:\Users\Admin\AppData\Local\Temp\d13b979b1bd8830f093bb9aab1c3f80e.exe"1⤵
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\WerFault.exeWerFault2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
15.5MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
1.1MB