7d8ff897cf83dc0577fb70fe364486e664b5b0e98156f313238d1d9cbb624970 | Triage

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05-01-2024 02:03

Sharing

Report Analysis Logs

General

Target

427d97f388c33ce479c3ccc095e2402b.exe
Size

16KB
MD5

427d97f388c33ce479c3ccc095e2402b
SHA1

a35c6ccd5c5810f5be57420e18789e31cf6b82cb
SHA256

7d8ff897cf83dc0577fb70fe364486e664b5b0e98156f313238d1d9cbb624970
SHA512

3d5ca2469a2e81e784020b99a940411273764b50fb818956978e4ffc59ab2461531ea7900689658692bda43d09326b068f4509706912c7580a8079b4ccbf8086
SSDEEP

384:9sT7LZYIM9iJ9skQahHG9oBT+JFbCDaCmQP2srsp:YLZYfGsRCZwF4aCmM2sop

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\Drivers\beep.sys	427d97f388c33ce479c3ccc095e2402b.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2972	427d97f388c33ce479c3ccc095e2402b.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
472	Process not Found

C:\Users\Admin\AppData\Local\Temp\427d97f388c33ce479c3ccc095e2402b.exe
"C:\Users\Admin\AppData\Local\Temp\427d97f388c33ce479c3ccc095e2402b.exe"
1⤵
- Drops file in Drivers directory
- Suspicious behavior: EnumeratesProcesses
PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2972-0-0x0000000000510000-0x000000000051E200-memory.dmp

Filesize
56KB

Download
memory/2972-1-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2972-2-0x0000000000510000-0x000000000051E200-memory.dmp

Filesize
56KB

Download
memory/2972-3-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download