3b99e9b2b7d642f74074bfaa97434dd2a79e8a8e3d37a8940719565dc3284dc8

Analysis

max time kernel
146s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2023, 12:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe
Size

7.1MB
MD5

754445fa96aa4c5811011230e1589fa0
SHA1

266482a91cb4e3b5fa87de56838aed795b331c85
SHA256

3b99e9b2b7d642f74074bfaa97434dd2a79e8a8e3d37a8940719565dc3284dc8
SHA512

6568d28b4fc56baafe747f5ee5be275f5f71d6e655a5aec672187ff8858e97a625afc9647a8cbc2ac98823b9f01fa31d2b20258a37b3a8eaabd33d8ab3321730
SSDEEP

196608:RWg2wtcByPPmUu9XVXLAa/+FiJTXS4HrSv2UJqo:RWgDtQyPDufA66oIvDJqo

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2188 set thread context of 4516	2188	olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe	86

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2188 wrote to memory of 4516	2188	olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe	86
PID 2188 wrote to memory of 4516	2188	olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe	86
PID 2188 wrote to memory of 4516	2188	olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe	86
PID 2188 wrote to memory of 4516	2188	olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe	86
PID 2188 wrote to memory of 4516	2188	olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe	86
PID 2188 wrote to memory of 4516	2188	olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe	86

C:\Users\Admin\AppData\Local\Temp\olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe
"C:\Users\Admin\AppData\Local\Temp\olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Users\Admin\AppData\Local\Temp\olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe
  C:\Users\Admin\AppData\Local\Temp\olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe
  2⤵
  PID:4516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\olegov08NEWSPECIALOFFICIALOFFEROCUASEOFUPDATELICENSE.exe.log

Filesize
859B

MD5
e204f3d12abd1691ce1f149399441188

SHA1
798042095539abfe857e456fca4e1035f67d29bf

SHA256
685f70bf685f654651dcd0acc495b6f52f02f73cc3ca8b3d2c8433aac9ba144d

SHA512
804c5ea57a59f86fd0c34479be4c479230bff79093548e8461758829928969da565c211ccc9cb9befa0fef15f0400a5b1f17d5ddf88aef6ff01b67a191176b9f

Download Submit
memory/2188-6-0x00007FF9DC5F0000-0x00007FF9DD0B1000-memory.dmp

Filesize
10.8MB

Download
memory/2188-1-0x00007FF9DC5F0000-0x00007FF9DD0B1000-memory.dmp

Filesize
10.8MB

Download
memory/2188-2-0x000000001C060000-0x000000001C070000-memory.dmp

Filesize
64KB

Download
memory/2188-0-0x0000000000D00000-0x000000000141E000-memory.dmp

Filesize
7.1MB

Download
memory/4516-35-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-39-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-8-0x00007FF9DC5F0000-0x00007FF9DD0B1000-memory.dmp

Filesize
10.8MB

Download
memory/4516-9-0x000000001C960000-0x000000001C970000-memory.dmp

Filesize
64KB

Download
memory/4516-10-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-11-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-13-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-15-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-17-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-19-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-21-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-23-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-25-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-27-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-29-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-31-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-33-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-3-0x0000000140000000-0x00000001400D0000-memory.dmp

Filesize
832KB

Download
memory/4516-37-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-7-0x000000001C7D0000-0x000000001C8D8000-memory.dmp

Filesize
1.0MB

Download
memory/4516-41-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-43-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-45-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-47-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-49-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-51-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-53-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-55-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-57-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-59-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-63-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-61-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-65-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-67-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-69-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-71-0x000000001C7D0000-0x000000001C8D3000-memory.dmp

Filesize
1.0MB

Download
memory/4516-750-0x00007FF9DC5F0000-0x00007FF9DD0B1000-memory.dmp

Filesize
10.8MB

Download
memory/4516-753-0x000000001C960000-0x000000001C970000-memory.dmp

Filesize
64KB

Download
memory/4516-2168-0x000000001C970000-0x000000001CA0E000-memory.dmp

Filesize
632KB

Download
memory/4516-2169-0x0000000001C90000-0x0000000001CDC000-memory.dmp

Filesize
304KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads