27d98e91c4e9fb55f9c4aa8efca637b23562e9c113afe939319cb74329cb8ffc

Resubmissions

27-11-2024 09:56

241127-lyk78symds 10

01-11-2023 13:57

231101-q9h98sbb31 3

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
01-11-2023 13:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

project5-2.exe
Size

479KB
MD5

0481980472e71600fae80a864999e485
SHA1

3a296eb9fb50e2fc3a648bbcad459192b1be1bea
SHA256

27d98e91c4e9fb55f9c4aa8efca637b23562e9c113afe939319cb74329cb8ffc
SHA512

86bd6e844a57180d31643b961430fcb87758d3027a5560d511f4bd32ecb13e33a81edb9c1cead02b4e43aaf8ff0e5974cfe1e49acfd4c84b7a516a3852c8925b
SSDEEP

6144:pTNlPsSiE0grIlHAjNL7SXAtKZnbr8qz6xzS06d17GQxAAXcpGZ5wIzkyOD+lRXs:pFR0gsAjNL3tQbr8w6xely1JcXgDsLm

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2200	project5-2.exe
2200	project5-2.exe
2636	dialer.exe
2636	dialer.exe
2636	dialer.exe
2636	dialer.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2200 wrote to memory of 2636	2200	project5-2.exe	28
PID 2200 wrote to memory of 2636	2200	project5-2.exe	28
PID 2200 wrote to memory of 2636	2200	project5-2.exe	28
PID 2200 wrote to memory of 2636	2200	project5-2.exe	28
PID 2200 wrote to memory of 2636	2200	project5-2.exe	28
PID 2200 wrote to memory of 2636	2200	project5-2.exe	28

C:\Users\Admin\AppData\Local\Temp\project5-2.exe
"C:\Users\Admin\AppData\Local\Temp\project5-2.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Windows\SysWOW64\dialer.exe
  "C:\Windows\system32\dialer.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2200-0-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2200-1-0x0000000002F50000-0x0000000003350000-memory.dmp

Filesize
4.0MB

Download
memory/2200-2-0x0000000002F50000-0x0000000003350000-memory.dmp

Filesize
4.0MB

Download
memory/2200-3-0x0000000002F50000-0x0000000003350000-memory.dmp

Filesize
4.0MB

Download
memory/2200-4-0x0000000002F50000-0x0000000003350000-memory.dmp

Filesize
4.0MB

Download
memory/2200-6-0x0000000076EB0000-0x0000000077059000-memory.dmp

Filesize
1.7MB

Download
memory/2200-8-0x0000000076250000-0x0000000076297000-memory.dmp

Filesize
284KB

Download
memory/2200-9-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2200-10-0x0000000002F50000-0x0000000003350000-memory.dmp

Filesize
4.0MB

Download
memory/2636-11-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2636-14-0x0000000001EF0000-0x00000000022F0000-memory.dmp

Filesize
4.0MB

Download
memory/2636-15-0x0000000076EB0000-0x0000000077059000-memory.dmp

Filesize
1.7MB

Download
memory/2636-16-0x0000000001EF0000-0x00000000022F0000-memory.dmp

Filesize
4.0MB

Download
memory/2636-13-0x0000000001EF0000-0x00000000022F0000-memory.dmp

Filesize
4.0MB

Download
memory/2636-19-0x0000000076250000-0x0000000076297000-memory.dmp

Filesize
284KB

Download
memory/2636-18-0x0000000076EB0000-0x0000000077059000-memory.dmp

Filesize
1.7MB

Download
memory/2636-20-0x0000000001EF0000-0x00000000022F0000-memory.dmp

Filesize
4.0MB

Download