d9627cb61bad073dc9138db4a471c860d918e1389a0b6627e69a7f4deee5c055

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 06:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c421cff4ac9533c47d596a513bb6fe9.exe
Size

343KB
MD5

2c421cff4ac9533c47d596a513bb6fe9
SHA1

8e4102cc87e3c3300c7b00c93bc2664eb17e091f
SHA256

d9627cb61bad073dc9138db4a471c860d918e1389a0b6627e69a7f4deee5c055
SHA512

f76fb040ab8bf688e92226bfc2d9b4142daf99598e5f0ab7112808fd5523603e81fe2a3045563488b6e84f3b0a5e857903d6f62e589dfeedd5fa8ff63ba21d53
SSDEEP

6144:c07dAoSJF2idZecnl20lHRxp3glyLdW4bHna+r3W8UDQB2RCQKhCc:c07tMF3Z4mxxa4lHaw3Wla2RTKgc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2436	2c421cff4ac9533c47d596a513bb6fe9.exe
2436	2c421cff4ac9533c47d596a513bb6fe9.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 1244	2436	2c421cff4ac9533c47d596a513bb6fe9.exe	21
PID 2436 wrote to memory of 1244	2436	2c421cff4ac9533c47d596a513bb6fe9.exe	21
PID 2436 wrote to memory of 1244	2436	2c421cff4ac9533c47d596a513bb6fe9.exe	21
PID 2436 wrote to memory of 1244	2436	2c421cff4ac9533c47d596a513bb6fe9.exe	21
PID 2436 wrote to memory of 1244	2436	2c421cff4ac9533c47d596a513bb6fe9.exe	21
PID 2436 wrote to memory of 1244	2436	2c421cff4ac9533c47d596a513bb6fe9.exe	21

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:1244
- C:\Users\Admin\AppData\Local\Temp\2c421cff4ac9533c47d596a513bb6fe9.exe
  "C:\Users\Admin\AppData\Local\Temp\2c421cff4ac9533c47d596a513bb6fe9.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1244-12-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1244-18-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2436-8-0x0000000002200000-0x0000000002201000-memory.dmp

Filesize
4KB

Download
memory/2436-3-0x00000000021D0000-0x00000000021D1000-memory.dmp

Filesize
4KB

Download
memory/2436-0-0x0000000000400000-0x0000000000462000-memory.dmp

Filesize
392KB

Download
memory/2436-7-0x0000000002210000-0x0000000002211000-memory.dmp

Filesize
4KB

Download
memory/2436-6-0x00000000021A0000-0x00000000021A1000-memory.dmp

Filesize
4KB

Download
memory/2436-5-0x00000000021B0000-0x00000000021B1000-memory.dmp

Filesize
4KB

Download
memory/2436-4-0x0000000002220000-0x0000000002221000-memory.dmp

Filesize
4KB

Download
memory/2436-9-0x0000000002230000-0x0000000002231000-memory.dmp

Filesize
4KB

Download
memory/2436-2-0x00000000021F0000-0x00000000021F1000-memory.dmp

Filesize
4KB

Download
memory/2436-11-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2436-10-0x00000000021C0000-0x00000000021C1000-memory.dmp

Filesize
4KB

Download
memory/2436-1-0x0000000001C10000-0x0000000001C64000-memory.dmp

Filesize
336KB

Download
memory/2436-32-0x0000000001C10000-0x0000000001C64000-memory.dmp

Filesize
336KB

Download
memory/2436-31-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2436-30-0x0000000000400000-0x0000000000462000-memory.dmp

Filesize
392KB

Download