e8f15cce81d73dd30199ac900f7c6b04b213121a8a8b00440399422d65a7b083

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 03:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Setup.exe
Size

6.2MB
MD5

379a74d6449d77be437b78c8ec875022
SHA1

6826d7db1411432b5fedaf8661c37a7d7da0162c
SHA256

e8f15cce81d73dd30199ac900f7c6b04b213121a8a8b00440399422d65a7b083
SHA512

37bc9bbfe4569c061872ae0e5d0671cf0abb7b54a1d981614b75b98c5f4315bbf15c03abc9cd40e54bc06ef9a384074adaefab0f773cf86ae445a2d70bac0f7a
SSDEEP

24576:NR5sykTElJqVMbCWCphFIcRt/SH4vypK/wBmRKmPehq9p24E1Z:j5sy/4VyiphFL3aH4vyoOmcweQ2R

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1692 set thread context of 2244	1692	Setup.exe	28

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1692	Setup.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28
PID 1692 wrote to memory of 2244	1692	Setup.exe	28

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1692
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
  C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
  2⤵
  PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1692-1-0x0000000074370000-0x0000000074A5E000-memory.dmp

Filesize
6.9MB

Download
memory/1692-0-0x00000000010D0000-0x0000000001206000-memory.dmp

Filesize
1.2MB

Download
memory/1692-2-0x0000000000830000-0x0000000000870000-memory.dmp

Filesize
256KB

Download
memory/1692-3-0x0000000000A90000-0x0000000000B22000-memory.dmp

Filesize
584KB

Download
memory/1692-4-0x0000000000C20000-0x0000000000C9E000-memory.dmp

Filesize
504KB

Download
memory/1692-5-0x00000000009E0000-0x0000000000A4E000-memory.dmp

Filesize
440KB

Download
memory/1692-6-0x00000000007D0000-0x000000000081C000-memory.dmp

Filesize
304KB

Download
memory/1692-7-0x0000000074370000-0x0000000074A5E000-memory.dmp

Filesize
6.9MB

Download
memory/1692-8-0x0000000000830000-0x0000000000870000-memory.dmp

Filesize
256KB

Download
memory/1692-19-0x0000000074370000-0x0000000074A5E000-memory.dmp

Filesize
6.9MB

Download
memory/2244-10-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-11-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-12-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-13-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-14-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2244-16-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-9-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-18-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-20-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/2244-21-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads