44918becfdb707e509e59491ffe33460fac7fccfe7873e83b56ae9e1fa83b9ff | Triage

Analysis

max time kernel
118s
max time network
142s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 17:17

Sharing

Report Analysis Logs

General

Target

load.exe
Size

2.0MB
MD5

b1c405577c64cb91aceae1beeec5a6cf
SHA1

ba1a03540f1cbe62ceb6523093a288682380d5ee
SHA256

036db747914ccb896aa34f6c58f9f7b2343fb031c2fef98558925526941ad74b
SHA512

cecfb576bf878d7ba27d64cda129894daa84bfce99dd30e66e77af877e64d24c6cf427b31f5e5196a6a6bf778a5b5ad38d7505034c9109b26283a49becc061d7
SSDEEP

6144:1A8BdXQQd50VIfoEWlvf4Dxqa0aeytsnHCH5:DXv1VWlX43tw

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1956 wrote to memory of 2204	1956	load.exe	29
PID 1956 wrote to memory of 2204	1956	load.exe	29
PID 1956 wrote to memory of 2204	1956	load.exe	29

C:\Users\Admin\AppData\Local\Temp\load.exe
"C:\Users\Admin\AppData\Local\Temp\load.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1956
- C:\Windows\system32\notepad.exe
  notepad.exe
  2⤵
  PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads