Analysis
-
max time kernel
140s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
23-10-2023 03:35
Static task
static1
Behavioral task
behavioral1
Sample
Design.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Design.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
New product.scr
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
New product.scr
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
PO_202310.exe
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
PO_202310.exe
Resource
win10v2004-20231020-en
General
-
Target
Design.exe
-
Size
432KB
-
MD5
b14e49dd5671ae89f3624ad7561731af
-
SHA1
b2aa05a7ad52059560755fa04439413afe184ca3
-
SHA256
0477755f4c245b988aa85d1f9375836a72953d6172a7a82f917bbf9e59dd7294
-
SHA512
b803330db90b127e178abf83227ddf8f59e00d4929c686f33f6ab9be1806fb15cbca47ff3f058f20fc3d8b0afe2ddefb0b9cdcc502d22a91d2957449774d38ee
-
SSDEEP
12288:yD7gUiVHOazGypq9Q/NGbEP2a6JYrOiqot:nHOazTNYEz6c
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
Design.exedescription pid process target process PID 2028 wrote to memory of 4224 2028 Design.exe RegAsm.exe PID 2028 wrote to memory of 4224 2028 Design.exe RegAsm.exe PID 2028 wrote to memory of 4224 2028 Design.exe RegAsm.exe