1e6065c57670611e726ac380377334b46c477ab353d0e78c066f53272552e551

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04/01/2024, 06:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4021f07d5170bfbe0f3dab5eea523676.exe
Size

617KB
MD5

4021f07d5170bfbe0f3dab5eea523676
SHA1

14d94e059f75659f82df8ad709026c2adfd21b59
SHA256

1e6065c57670611e726ac380377334b46c477ab353d0e78c066f53272552e551
SHA512

b37feefb76da34e9201c1950fda599b88e533067220b4e2138671ddd40aa957de73dc03ba1c1ae7b088605e9d62899181a1cc0dae58c8d8becaf35c1047571c0
SSDEEP

12288:xXR2YWp551IHaDJj2bvNRQSpe+BAE28jcoc/bHJsqyCIT9H:nxI551I6DJj2bvNRQ1sAE28jM/bDMH

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2228 set thread context of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18
PID 2228 wrote to memory of 920	2228	4021f07d5170bfbe0f3dab5eea523676.exe	18

C:\Users\Admin\AppData\Local\Temp\4021f07d5170bfbe0f3dab5eea523676.exe
"C:\Users\Admin\AppData\Local\Temp\4021f07d5170bfbe0f3dab5eea523676.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Users\Admin\AppData\Local\Temp\4021f07d5170bfbe0f3dab5eea523676.exe
  "C:\Users\Admin\AppData\Local\Temp\4021f07d5170bfbe0f3dab5eea523676.exe"
  2⤵
  PID:920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/920-30-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/920-7-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/920-9-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/920-18-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/920-11-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/920-14-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2228-31-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-28-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-13-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-25-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-29-0x0000000004000000-0x0000000004071000-memory.dmp

Filesize
452KB

Download
memory/2228-27-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-15-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-23-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-21-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-19-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-17-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download
memory/2228-0-0x00000000008E0000-0x00000000008E1000-memory.dmp

Filesize
4KB

Download
memory/2228-32-0x00000000000A0000-0x00000000001A0000-memory.dmp

Filesize
1024KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads