Analysis
- max time kernel
33s - max time network
38s - platform
windows10-2004_x64 - resource
win10v2004-20231023-en - resource tags
- submitted
27/11/2023, 02:09
General
- Target db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b.exe
- Size 88KB
- Sample231127-clncdsdg26
- SHA256 db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b.exe"C:\Users\Admin\AppData\Local\Temp\db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\explorer.exeexplorer2⤵
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2156-6-0x0000000000890000-0x0000000000897000-memory.dmp
memory/2156-7-0x0000000000890000-0x0000000000897000-memory.dmp
memory/2156-8-0x0000000000890000-0x0000000000897000-memory.dmp
memory/2300-15-0x0000000000580000-0x0000000000587000-memory.dmp
memory/2300-17-0x00007FFC8E5AD000-0x00007FFC8E5AE000-memory.dmp
memory/2340-12-0x0000000000EE0000-0x0000000000EE7000-memory.dmp
memory/2440-13-0x0000000000E60000-0x0000000000E67000-memory.dmp
memory/3336-0-0x0000000000570000-0x0000000000571000-memory.dmp
memory/3336-1-0x0000000000400000-0x0000000000415000-memory.dmp
memory/3336-2-0x0000000002570000-0x0000000002F70000-memory.dmp
memory/3336-3-0x00000000009F0000-0x00000000009F1000-memory.dmp