b942779bc420a392bcc06d04ac412d9ea33dfdbe0edb1a79a84f3657d842d1a3

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 07:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2cd3a4a086e18ed84a096235b4ed5b71.exe
Size

8.2MB
MD5

2cd3a4a086e18ed84a096235b4ed5b71
SHA1

ec19ab032ad48654dc604d3644dde6b1d20cf352
SHA256

b942779bc420a392bcc06d04ac412d9ea33dfdbe0edb1a79a84f3657d842d1a3
SHA512

c274fc17a09c8918acafa29e37498d12abc17f2999ce819118f255b46f299d26cbba137cbf8780b22575cfeded0533e7148245ee23160b6ec7e1e66416f24764
SSDEEP

98304:0EcuggFv41QZ73QceMbnLtyCKKKcre1pRTHBeAyECIQscAf2prmVlJ:pDFvlZ73QcbKVGYPLBvCIQtA+ol

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3012 set thread context of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2312	2cd3a4a086e18ed84a096235b4ed5b71.exe
2312	2cd3a4a086e18ed84a096235b4ed5b71.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28
PID 3012 wrote to memory of 2312	3012	2cd3a4a086e18ed84a096235b4ed5b71.exe	28

C:\Users\Admin\AppData\Local\Temp\2cd3a4a086e18ed84a096235b4ed5b71.exe
"C:\Users\Admin\AppData\Local\Temp\2cd3a4a086e18ed84a096235b4ed5b71.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Users\Admin\AppData\Local\Temp\2cd3a4a086e18ed84a096235b4ed5b71.exe
  "C:\Users\Admin\AppData\Local\Temp\2cd3a4a086e18ed84a096235b4ed5b71.exe"
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2312-19-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2312-21-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-3-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-5-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-7-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-9-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-11-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-13-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-15-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-17-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-1-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-23-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-31-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-25-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-30-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-26-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-27-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-28-0x0000000000400000-0x0000000000A51000-memory.dmp

Filesize
6.3MB

Download
memory/2312-29-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/3012-24-0x0000000000400000-0x0000000000B73000-memory.dmp

Filesize
7.4MB

Download
memory/3012-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads