b90deabf4721fed36fec4855dc5b3e07de94f8e58742dc7d466f29918794377c | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
24/11/2023, 12:40

Sharing

Report Analysis Logs

General

Target

test.exe
Size

7KB
MD5

1a583f128dfb0b631073e9676d205bcc
SHA1

60e6bd6e85a96f3e1c4e1402c7457a46a5ee5b89
SHA256

b90deabf4721fed36fec4855dc5b3e07de94f8e58742dc7d466f29918794377c
SHA512

bd1c886f8aa77506ce87b0b68352aaf49f5a506fa197a46412d9d81296a8b8100b6027a4e7f8724cf3567e7170756d00099d3509cb649de5c50f710d7a364957
SSDEEP

24:eFGStrJ9u0/6KAnZdEBQAV8aKq9K9qbeNDJSqUmZEWdXCIGDpmB:is070EBQpE9pSDoqUjWZCSB

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 840	2252	test.exe	29
PID 2252 wrote to memory of 840	2252	test.exe	29
PID 2252 wrote to memory of 840	2252	test.exe	29

C:\Users\Admin\AppData\Local\Temp\test.exe
"C:\Users\Admin\AppData\Local\Temp\test.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Windows\system32\cmd.exe
  cmd
  2⤵
  PID:840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2252-0-0x0000000140000000-0x0000000140004248-memory.dmp

Filesize
16KB

Download