d773a8dfb264e3dc31b162c5d8237e5184fd1a2d46fa34d1d0f92805cb46ae73 | Triage

Analysis

max time kernel
120s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

150d3fdee3adda7e86e44d7d5681bbf6.exe
Size

268KB
MD5

150d3fdee3adda7e86e44d7d5681bbf6
SHA1

8abc4815d4b46e0d46e4653a74dd2872402ac88c
SHA256

d773a8dfb264e3dc31b162c5d8237e5184fd1a2d46fa34d1d0f92805cb46ae73
SHA512

cb636bfcf8b5c83040ab79c13f156da767c70879e26f6c14327dbcb4d893cd3f8acd8efcb551c690a224fa9fa3528dbc25d05c190f4d1347c16799c3cd99c347
SSDEEP

6144:ZNkVsuaRaU6mHGPXx9Zye3u3uZeVw12eCq:70aRz6mHGPLh3u3Pzep

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2492 wrote to memory of 1616	2492	150d3fdee3adda7e86e44d7d5681bbf6.exe	27
PID 2492 wrote to memory of 1616	2492	150d3fdee3adda7e86e44d7d5681bbf6.exe	27
PID 2492 wrote to memory of 1616	2492	150d3fdee3adda7e86e44d7d5681bbf6.exe	27
PID 2492 wrote to memory of 1616	2492	150d3fdee3adda7e86e44d7d5681bbf6.exe	27
PID 2492 wrote to memory of 1616	2492	150d3fdee3adda7e86e44d7d5681bbf6.exe	27
PID 2492 wrote to memory of 1616	2492	150d3fdee3adda7e86e44d7d5681bbf6.exe	27
PID 2492 wrote to memory of 1616	2492	150d3fdee3adda7e86e44d7d5681bbf6.exe	27

C:\Users\Admin\AppData\Local\Temp\150d3fdee3adda7e86e44d7d5681bbf6.exe
"C:\Users\Admin\AppData\Local\Temp\150d3fdee3adda7e86e44d7d5681bbf6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2492
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe"
  2⤵
  PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2492-0-0x0000000013140000-0x00000000131D3235-memory.dmp

Filesize
588KB

Download
memory/2492-1-0x0000000013140000-0x00000000131D3235-memory.dmp

Filesize
588KB

Download