d773a8dfb264e3dc31b162c5d8237e5184fd1a2d46fa34d1d0f92805cb46ae73 | Triage

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 09:54

Sharing

Report Analysis Logs

General

Target

150d3fdee3adda7e86e44d7d5681bbf6.exe
Size

268KB
MD5

150d3fdee3adda7e86e44d7d5681bbf6
SHA1

8abc4815d4b46e0d46e4653a74dd2872402ac88c
SHA256

d773a8dfb264e3dc31b162c5d8237e5184fd1a2d46fa34d1d0f92805cb46ae73
SHA512

cb636bfcf8b5c83040ab79c13f156da767c70879e26f6c14327dbcb4d893cd3f8acd8efcb551c690a224fa9fa3528dbc25d05c190f4d1347c16799c3cd99c347
SSDEEP

6144:ZNkVsuaRaU6mHGPXx9Zye3u3uZeVw12eCq:70aRz6mHGPLh3u3Pzep

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 1188 wrote to memory of 2328	1188	150d3fdee3adda7e86e44d7d5681bbf6.exe	90
PID 1188 wrote to memory of 2328	1188	150d3fdee3adda7e86e44d7d5681bbf6.exe	90
PID 1188 wrote to memory of 2328	1188	150d3fdee3adda7e86e44d7d5681bbf6.exe	90
PID 1188 wrote to memory of 2328	1188	150d3fdee3adda7e86e44d7d5681bbf6.exe	90
PID 1188 wrote to memory of 2328	1188	150d3fdee3adda7e86e44d7d5681bbf6.exe	90

C:\Users\Admin\AppData\Local\Temp\150d3fdee3adda7e86e44d7d5681bbf6.exe
"C:\Users\Admin\AppData\Local\Temp\150d3fdee3adda7e86e44d7d5681bbf6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1188
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe"
  2⤵
  PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1188-0-0x0000000013140000-0x00000000131D3235-memory.dmp

Filesize
588KB

Download
memory/1188-1-0x0000000013140000-0x00000000131D3235-memory.dmp

Filesize
588KB

Download