a3e97dce26c775da231ccba87f9ea9ed39921b7b7cacef12f0ae086913b263e5 | Triage

Analysis

max time kernel
122s
max time network
144s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 14:10

Sharing

Report Analysis Logs

General

Target

b92cb06f27febdd6da07181b2f4dc465.exe
Size

487KB
MD5

b92cb06f27febdd6da07181b2f4dc465
SHA1

8ad9e677aa69a079f504c21531f3a684efb3d831
SHA256

a3e97dce26c775da231ccba87f9ea9ed39921b7b7cacef12f0ae086913b263e5
SHA512

7b8bc74ceac8e09ac624f142aac80ec72f913192110b7b725fe76a99fcdda79b49fe30147bed52b7a060cc33b6d6aab5067d064c5351b09cbf7a5a104ec4db42
SSDEEP

12288:sC847Cn7OqKoeMRN3UBDWRf7nHpS37yOlYN+:sCun7OqKoedBiRf7nHYOOlYc

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3036 set thread context of 2496	3036	b92cb06f27febdd6da07181b2f4dc465.exe	28

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 2496	3036	b92cb06f27febdd6da07181b2f4dc465.exe	28
PID 3036 wrote to memory of 2496	3036	b92cb06f27febdd6da07181b2f4dc465.exe	28
PID 3036 wrote to memory of 2496	3036	b92cb06f27febdd6da07181b2f4dc465.exe	28
PID 3036 wrote to memory of 2496	3036	b92cb06f27febdd6da07181b2f4dc465.exe	28
PID 3036 wrote to memory of 2496	3036	b92cb06f27febdd6da07181b2f4dc465.exe	28
PID 3036 wrote to memory of 2496	3036	b92cb06f27febdd6da07181b2f4dc465.exe	28

C:\Users\Admin\AppData\Local\Temp\b92cb06f27febdd6da07181b2f4dc465.exe
"C:\Users\Admin\AppData\Local\Temp\b92cb06f27febdd6da07181b2f4dc465.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Users\Admin\AppData\Local\Temp\b92cb06f27febdd6da07181b2f4dc465.exe
  "C:\Users\Admin\AppData\Local\Temp\b92cb06f27febdd6da07181b2f4dc465.exe"
  2⤵
  PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2496-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2496-3-0x0000000000030000-0x0000000000032000-memory.dmp

Filesize
8KB

Download