Analysis

  • max time kernel
    118s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 06:59

General

  • Target

    119d8b08920e30890d0819d221eebe02.exe

  • Size

    178KB

  • MD5

    119d8b08920e30890d0819d221eebe02

  • SHA1

    91252ee581a98931954200a3e8ceabc875bbf91d

  • SHA256

    7d7cb41e32c6c2efc5086dfcfa158c6055dda05e275eedf818c144d546d415ac

  • SHA512

    782f60c906d48dbdcbbc841a9f0875c58a00ec4cfd54fd5a10ea04f073bb34df03ad825abf577e8763b8384979cacff267c0ccf0acbdb19dfc11e2d1467b2539

  • SSDEEP

    3072:gaRVSzWg0o+YX950aS/9jxhmBnFYnYljpnps6mguEOtucSH7MgyNZCRj+iWTmN:gaRVOWg0o+YX950aSjxwnFYYljpu6PcO

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\119d8b08920e30890d0819d221eebe02.exe
    "C:\Users\Admin\AppData\Local\Temp\119d8b08920e30890d0819d221eebe02.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2664
    • C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
      dw20.exe -x -s 444
      2⤵
        PID:2520

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2520-3-0x0000000000660000-0x0000000000661000-memory.dmp

      Filesize

      4KB

    • memory/2520-6-0x0000000000660000-0x0000000000661000-memory.dmp

      Filesize

      4KB

    • memory/2664-0-0x00000000744C0000-0x0000000074A6B000-memory.dmp

      Filesize

      5.7MB

    • memory/2664-1-0x00000000744C0000-0x0000000074A6B000-memory.dmp

      Filesize

      5.7MB

    • memory/2664-2-0x0000000000280000-0x00000000002C0000-memory.dmp

      Filesize

      256KB

    • memory/2664-4-0x00000000744C0000-0x0000000074A6B000-memory.dmp

      Filesize

      5.7MB

    • memory/2664-5-0x0000000000280000-0x00000000002C0000-memory.dmp

      Filesize

      256KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.