Analysis
- max time kernel
52s - max time network
40s - platform
windows10-2004_x64 - resource
win10v2004-20231020-en - resource tags
- submitted
23/10/2023, 10:06
General
- Target setup_1.4.3.exe
- Size 27.7MB
- Sample231023-l5flbsff6y
- SHA256 6657525f9351d6f04591054096eabafb232ebb12b8f10c7fcc3277acc3aa70e7
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup_1.4.3.exe"C:\Users\Admin\AppData\Local\Temp\setup_1.4.3.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-HQ6MH.tmp\setup_1.4.3.tmp"C:\Users\Admin\AppData\Local\Temp\is-HQ6MH.tmp\setup_1.4.3.tmp" /SL5="$B01FA,28166056,1076736,C:\Users\Admin\AppData\Local\Temp\setup_1.4.3.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
setup_1.4.3.tmp
memory/1020-1-0x0000000000400000-0x0000000000514000-memory.dmp
memory/1020-16-0x0000000000400000-0x0000000000514000-memory.dmp
memory/1896-6-0x0000000002840000-0x0000000002841000-memory.dmp
memory/1896-17-0x0000000000400000-0x0000000000750000-memory.dmp
memory/1896-18-0x0000000002840000-0x0000000002841000-memory.dmp