f8c9828ed05f0f8795ce13945f86c812863ba14be17696631579f43155a25111

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 11:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1c4636dbbe020967242242de2d355e01.exe
Size

26KB
MD5

1c4636dbbe020967242242de2d355e01
SHA1

547623ac659de55b35930e416af6288b90f1c01d
SHA256

f8c9828ed05f0f8795ce13945f86c812863ba14be17696631579f43155a25111
SHA512

23b513b55423890d05ce0f58c4872b4f8ea5fc8f81ef0467021091c71e7754e45e4bd8665948f467b0a3523716cc7a4282b310fe1d9c17b3014965ccade00654
SSDEEP

384:OKMMjtnMgBLKM2ES29CKnIkIQjQxc9bo6Pvjz+nIFqkQYMNMjsow1w6SHGOgPGwF:mM9+qn8QyP6DanIXImaTSmOg+wlYY

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 1612	2256	1c4636dbbe020967242242de2d355e01.exe	29
PID 2256 wrote to memory of 1612	2256	1c4636dbbe020967242242de2d355e01.exe	29
PID 2256 wrote to memory of 1612	2256	1c4636dbbe020967242242de2d355e01.exe	29
PID 2256 wrote to memory of 1612	2256	1c4636dbbe020967242242de2d355e01.exe	29
PID 2256 wrote to memory of 1876	2256	1c4636dbbe020967242242de2d355e01.exe	30
PID 2256 wrote to memory of 1876	2256	1c4636dbbe020967242242de2d355e01.exe	30
PID 2256 wrote to memory of 1876	2256	1c4636dbbe020967242242de2d355e01.exe	30
PID 2256 wrote to memory of 1876	2256	1c4636dbbe020967242242de2d355e01.exe	30
PID 2256 wrote to memory of 1468	2256	1c4636dbbe020967242242de2d355e01.exe	31
PID 2256 wrote to memory of 1468	2256	1c4636dbbe020967242242de2d355e01.exe	31
PID 2256 wrote to memory of 1468	2256	1c4636dbbe020967242242de2d355e01.exe	31
PID 2256 wrote to memory of 1468	2256	1c4636dbbe020967242242de2d355e01.exe	31
PID 2256 wrote to memory of 2908	2256	1c4636dbbe020967242242de2d355e01.exe	32
PID 2256 wrote to memory of 2908	2256	1c4636dbbe020967242242de2d355e01.exe	32
PID 2256 wrote to memory of 2908	2256	1c4636dbbe020967242242de2d355e01.exe	32
PID 2256 wrote to memory of 2908	2256	1c4636dbbe020967242242de2d355e01.exe	32
PID 2256 wrote to memory of 2348	2256	1c4636dbbe020967242242de2d355e01.exe	33
PID 2256 wrote to memory of 2348	2256	1c4636dbbe020967242242de2d355e01.exe	33
PID 2256 wrote to memory of 2348	2256	1c4636dbbe020967242242de2d355e01.exe	33
PID 2256 wrote to memory of 2348	2256	1c4636dbbe020967242242de2d355e01.exe	33

C:\Users\Admin\AppData\Local\Temp\1c4636dbbe020967242242de2d355e01.exe
"C:\Users\Admin\AppData\Local\Temp\1c4636dbbe020967242242de2d355e01.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c Color A
  2⤵
  PID:1612
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c Color B
  2⤵
  PID:1876
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c Color C
  2⤵
  PID:1468
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c Color D
  2⤵
  PID:2908
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c Color E
  2⤵
  PID:2348

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads