b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d | Triage

Analysis

max time kernel
132s
max time network
142s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 14:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

754d4a7e0a409ba9fbcf8371b7c377b5.exe
Size

40KB
MD5

754d4a7e0a409ba9fbcf8371b7c377b5
SHA1

542c1ddc7f240b11454ee75763f84500883052ff
SHA256

b79a4e0b6e426381ddfe209220ec9c8f395e9125535b6056d7322c0dafc55f9d
SHA512

8a99b7172c55abdca71d79d44c938f88e8c07849d1fec2378861a0b5496664f50463933b8a8cad038b175519a3e977f95879878fb88492196eb13f1a70f115d9
SSDEEP

768:7iKP5JWWs3pj1u2T3yetVqtqVKkYrRL2W:Taj3ZVt0tqIku52W

Score

1^/10

Malware Config

Signatures

Runs net.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2356	754d4a7e0a409ba9fbcf8371b7c377b5.exe
2356	754d4a7e0a409ba9fbcf8371b7c377b5.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 1920	2356	754d4a7e0a409ba9fbcf8371b7c377b5.exe	19
PID 2356 wrote to memory of 1920	2356	754d4a7e0a409ba9fbcf8371b7c377b5.exe	19
PID 2356 wrote to memory of 1920	2356	754d4a7e0a409ba9fbcf8371b7c377b5.exe	19
PID 2356 wrote to memory of 1920	2356	754d4a7e0a409ba9fbcf8371b7c377b5.exe	19
PID 1920 wrote to memory of 2208	1920	net.exe	17
PID 1920 wrote to memory of 2208	1920	net.exe	17
PID 1920 wrote to memory of 2208	1920	net.exe	17
PID 1920 wrote to memory of 2208	1920	net.exe	17

C:\Users\Admin\AppData\Local\Temp\754d4a7e0a409ba9fbcf8371b7c377b5.exe
"C:\Users\Admin\AppData\Local\Temp\754d4a7e0a409ba9fbcf8371b7c377b5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\SysWOW64\net.exe
  net stop sharedaccess
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1920

C:\Windows\SysWOW64\net1.exe
C:\Windows\system32\net1 stop sharedaccess
1⤵
PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads