Analysis
-
max time kernel
147s -
max time network
161s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11/10/2023, 12:59
General
-
Target
Proteus 8.13 SP0 Pro.exe
-
Size
446.1MB
-
MD5
95236ae3c2876d9439146b2fe639a279
-
SHA1
f283bacd0299e857609fd44627a4234f73254935
-
SHA256
e8cd3a24bfffad696181213ea1e4913dca79f5d279e1cbb1491679626af1c968
-
SHA512
1f2f6a688771f207b0285f20db31f42f44a8900723c085a031b585ad8e312ce6dd55b06f46150b0447da1df79263db05fcd421bd96bea05587336d44d998fa30
-
SSDEEP
12582912:9PcntqB4kW9RXmC0r41T7WSlFSLnKeBYW+qYwrLZ:eA/W/mC848VLNBY1PwB
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Proteus 8.13 SP0 Pro.exe"C:\Users\Admin\AppData\Local\Temp\Proteus 8.13 SP0 Pro.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-JBU1C.tmp\Proteus 8.13 SP0 Pro.tmp"C:\Users\Admin\AppData\Local\Temp\is-JBU1C.tmp\Proteus 8.13 SP0 Pro.tmp" /SL5="$70120,466796755,146944,C:\Users\Admin\AppData\Local\Temp\Proteus 8.13 SP0 Pro.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
MD50ed3c16d7d62a976a92233de2c3697b0
SHA118000062e977a3d7256abbad8d95dcc36e97be31
SHA256a54ac3ba31cb62f4d35e3f76ef1a9d11c9b090f7936b280357874ab275bc5ea6
SHA512560af1596da8449f637b58c3d706f0df3ca487574e7cf911ffdcc522d6f9b9e01c466f3f805881c09dbfad9e744b202f393d17f33d641e460a3b32a16e99b37e
-
Filesize
1.2MB
MD50ed3c16d7d62a976a92233de2c3697b0
SHA118000062e977a3d7256abbad8d95dcc36e97be31
SHA256a54ac3ba31cb62f4d35e3f76ef1a9d11c9b090f7936b280357874ab275bc5ea6
SHA512560af1596da8449f637b58c3d706f0df3ca487574e7cf911ffdcc522d6f9b9e01c466f3f805881c09dbfad9e744b202f393d17f33d641e460a3b32a16e99b37e
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.2MB