Analysis
-
max time kernel
292s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
10/10/2023, 06:59
Static task
static1
Behavioral task
behavioral1
Sample
DigitalPulse.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
DigitalPulse.exe
Resource
win10v2004-20230915-en
General
-
Target
DigitalPulse.exe
-
Size
5.6MB
-
MD5
fe469d9ce18f3bd33de41b8fd8701c4d
-
SHA1
99411eab81e0d7e8607e8fe0f715f635e541e52a
-
SHA256
b253f2cc3cafc35941d978a4d14b65610e641cb461e862fb0c155f3c30ce127a
-
SHA512
5b40c5259d01944e718bb14b8e6b994f2ea5bd391058aa8d086033cd609cb54231c7e07b4ab307ecfd5be28936e1c5576d3448504b99d9ac05c5442e5e1e85d9
-
SSDEEP
98304:lkLdjFeUa29WIx3N3oyqA2QbD15d5a8Nshbsm6gZ70pxm:mdjFe5W3NYvAlJ5vsBJfZwpk
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2940 DigitalPulse.tmp -
Loads dropped DLL 1 IoCs
pid Process 2280 DigitalPulse.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2940 DigitalPulse.tmp -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2280 wrote to memory of 2940 2280 DigitalPulse.exe 28 PID 2280 wrote to memory of 2940 2280 DigitalPulse.exe 28 PID 2280 wrote to memory of 2940 2280 DigitalPulse.exe 28 PID 2280 wrote to memory of 2940 2280 DigitalPulse.exe 28 PID 2280 wrote to memory of 2940 2280 DigitalPulse.exe 28 PID 2280 wrote to memory of 2940 2280 DigitalPulse.exe 28 PID 2280 wrote to memory of 2940 2280 DigitalPulse.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\DigitalPulse.exe"C:\Users\Admin\AppData\Local\Temp\DigitalPulse.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2280 -
C:\Users\Admin\AppData\Local\Temp\is-B23P6.tmp\DigitalPulse.tmp"C:\Users\Admin\AppData\Local\Temp\is-B23P6.tmp\DigitalPulse.tmp" /SL5="$70120,5025136,832512,C:\Users\Admin\AppData\Local\Temp\DigitalPulse.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
PID:2940
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
MD5ebec033f87337532b23d9398f649eec9
SHA1c4335168ec2f70621f11f614fe24ccd16d15c9fb
SHA25682fdd2282cf61cfa6155c51a82c4db79487ffeb377d0245d513edeb44d731c16
SHA5123875c2dd9bbeb5be00c2ccf8391bcb92d328a3294ce5c2d31fd09f20d80e12bd610d5473dfc2e13962578e4bb75336615cdf16251489a31ecbe4873d09cf1b11
-
Filesize
3.1MB
MD5ebec033f87337532b23d9398f649eec9
SHA1c4335168ec2f70621f11f614fe24ccd16d15c9fb
SHA25682fdd2282cf61cfa6155c51a82c4db79487ffeb377d0245d513edeb44d731c16
SHA5123875c2dd9bbeb5be00c2ccf8391bcb92d328a3294ce5c2d31fd09f20d80e12bd610d5473dfc2e13962578e4bb75336615cdf16251489a31ecbe4873d09cf1b11