Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
30-11-2023 10:59
Behavioral task
behavioral1
Sample
shiba_gold_menu.exe
Resource
win7-20231023-en
General
-
Target
shiba_gold_menu.exe
-
Size
14.4MB
-
MD5
ab1fd623144613f4c22c375cc511bf4c
-
SHA1
21c672397db1d55b2c85adc66bd18636c08d7c91
-
SHA256
e856807a3c8be6fd03584f21394646e849daed25af12690bcf1a3bbfff760e33
-
SHA512
d7a22be508b49fa2fdd47f5f7123375248b7d216c8ef69e25728e3a0f9c26c835d7809c54b744bafb5d912b9ed54278dee88d1101026d571c6648cda4d631b1f
-
SSDEEP
393216:uiIE7YoPQ6dQuslSq99oWOv+9fg3v0wHa+c:v7rPQ6dQuSDorvSY3v0f+
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2540 shiba_gold_menu.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2984 wrote to memory of 2540 2984 shiba_gold_menu.exe 28 PID 2984 wrote to memory of 2540 2984 shiba_gold_menu.exe 28 PID 2984 wrote to memory of 2540 2984 shiba_gold_menu.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\shiba_gold_menu.exe"C:\Users\Admin\AppData\Local\Temp\shiba_gold_menu.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2984 -
C:\Users\Admin\AppData\Local\Temp\shiba_gold_menu.exe"C:\Users\Admin\AppData\Local\Temp\shiba_gold_menu.exe"2⤵
- Loads dropped DLL
PID:2540
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.3MB
MD5deaf0c0cc3369363b800d2e8e756a402
SHA13085778735dd8badad4e39df688139f4eed5f954
SHA256156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
SHA5125cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989
-
Filesize
4.3MB
MD5deaf0c0cc3369363b800d2e8e756a402
SHA13085778735dd8badad4e39df688139f4eed5f954
SHA256156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
SHA5125cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989