Resubmissions

16-08-2023 00:43

230816-a27d4aeb62 3

16-08-2023 00:32

230816-av19haga5x 4

Analysis

  • max time kernel
    32s
  • max time network
    39s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-08-2023 00:32

General

  • Target

    ImpactInstaller-0.9.5.exe

  • Size

    2.4MB

  • MD5

    d9324dd6a6d5fd6247f2aff7153e297c

  • SHA1

    c4d49419289adbbd6a8798fca47c528b957972f1

  • SHA256

    4f3ef1e2e0eaaaec3fb52093d279a2e75f6dd2b2fae0028ff0aeb97368ae0a55

  • SHA512

    1b03c23545301f4d445fa894fb9f0ec770b2a2f099fb0e8254af0a79cb4c2fffdef24accd5ad28d46fb3f6bef22c7994e814575cd14baf60497688b057cbd085

  • SSDEEP

    49152:/t7ZxrWpynDGoMhG+4CgPHJaOHKh5Va1lPBTpWEVHg:/t7ZxrWgDGoq4Bf0OHKh5M1Npptu

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 12 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ImpactInstaller-0.9.5.exe
    "C:\Users\Admin\AppData\Local\Temp\ImpactInstaller-0.9.5.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2448
    • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -classpath "C:\Users\Admin\AppData\Local\Temp\ImpactInstaller-0.9.5.exe;lib\installer-0.9.5.jar" io.github.ImpactDevelopment.installer.Installer
      2⤵
      • Drops file in Program Files directory
      PID:3956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2448-142-0x0000000000400000-0x0000000000452000-memory.dmp

    Filesize

    328KB

  • memory/2448-158-0x0000000000400000-0x0000000000452000-memory.dmp

    Filesize

    328KB

  • memory/3956-137-0x0000000002CC0000-0x0000000003CC0000-memory.dmp

    Filesize

    16.0MB

  • memory/3956-145-0x0000000000E10000-0x0000000000E11000-memory.dmp

    Filesize

    4KB

  • memory/3956-146-0x0000000000E10000-0x0000000000E11000-memory.dmp

    Filesize

    4KB

  • memory/3956-157-0x0000000002CC0000-0x0000000003CC0000-memory.dmp

    Filesize

    16.0MB

  • memory/3956-156-0x0000000002F50000-0x0000000002F60000-memory.dmp

    Filesize

    64KB

  • memory/3956-155-0x0000000002F40000-0x0000000002F50000-memory.dmp

    Filesize

    64KB

  • memory/3956-159-0x0000000002CC0000-0x0000000003CC0000-memory.dmp

    Filesize

    16.0MB