78c34c1cc152109932ca558cb10ea6a3d153349a4e304f6c3c1bfcc4f85f51f7

General

Target

2a8ef0c085e3231332a42d0b07bf52b2.exe
Size

46KB
MD5

2a8ef0c085e3231332a42d0b07bf52b2
SHA1

e4d8807e498f1bb259b163b2e70e93d81e32f98c
SHA256

78c34c1cc152109932ca558cb10ea6a3d153349a4e304f6c3c1bfcc4f85f51f7
SHA512

b08c96f15efb38dc51c6dc53a5675d4287846926a7500f26070ccdcbe631596159c2483a32e2499e4921856a915f991e74d3dd010107910965232e7c4e69ef46
SSDEEP

768:+ZdIE6mCfDXZXDuT+pxvPDgAiXKZC2p2ng4nGwcsAsn:cpEZXcCvfA2p2nNWsV

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2248 set thread context of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
584	2a8ef0c085e3231332a42d0b07bf52b2.exe
584	2a8ef0c085e3231332a42d0b07bf52b2.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 2248 wrote to memory of 584	2248	2a8ef0c085e3231332a42d0b07bf52b2.exe	28
PID 584 wrote to memory of 1204	584	2a8ef0c085e3231332a42d0b07bf52b2.exe	12
PID 584 wrote to memory of 1204	584	2a8ef0c085e3231332a42d0b07bf52b2.exe	12
PID 584 wrote to memory of 1204	584	2a8ef0c085e3231332a42d0b07bf52b2.exe	12
PID 584 wrote to memory of 1204	584	2a8ef0c085e3231332a42d0b07bf52b2.exe	12

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:1204
- C:\Users\Admin\AppData\Local\Temp\2a8ef0c085e3231332a42d0b07bf52b2.exe
  "C:\Users\Admin\AppData\Local\Temp\2a8ef0c085e3231332a42d0b07bf52b2.exe"
  2⤵
  - Suspicious use of SetThreadContext
  - Suspicious use of WriteProcessMemory
  PID:2248
- - C:\Users\Admin\AppData\Local\Temp\2a8ef0c085e3231332a42d0b07bf52b2.exe
    "C:\Users\Admin\AppData\Local\Temp\2a8ef0c085e3231332a42d0b07bf52b2.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/584-9482-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/584-9500-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/584-9488-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/584-9484-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2248-30-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-28-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-52-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-50-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-48-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-46-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-44-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-40-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-38-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-36-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-34-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-32-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-24-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-54-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-26-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-22-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-20-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-18-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-16-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-14-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-6-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-4-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-2-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-0-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-56-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-58-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-60-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download
memory/2248-62-0x0000000000340000-0x000000000034C000-memory.dmp

Filesize
48KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads