4a3838d221150c1f6e65b2813a61f0e2edd9cb488743d246195d861c7acc639f | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
05/01/2024, 02:26

Sharing

Report Analysis Logs

General

Target

42884a0b1a737ec7280eab1795984363.exe
Size

3KB
MD5

42884a0b1a737ec7280eab1795984363
SHA1

d4c72e4e59ba7c4c9a10c58266765fa62a858bd7
SHA256

4a3838d221150c1f6e65b2813a61f0e2edd9cb488743d246195d861c7acc639f
SHA512

50879fd3b9d90ae506c39f850cdcd12a5b74b9b8ca82749c5b5e1416ad23140b120da55a1751f0a05ce589d81867044388323f4906c4f29602f06f01486d213a

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1848 wrote to memory of 2140	1848	42884a0b1a737ec7280eab1795984363.exe	17
PID 1848 wrote to memory of 2140	1848	42884a0b1a737ec7280eab1795984363.exe	17
PID 1848 wrote to memory of 2140	1848	42884a0b1a737ec7280eab1795984363.exe	17
PID 1848 wrote to memory of 2140	1848	42884a0b1a737ec7280eab1795984363.exe	17

C:\Users\Admin\AppData\Local\Temp\42884a0b1a737ec7280eab1795984363.exe
"C:\Users\Admin\AppData\Local\Temp\42884a0b1a737ec7280eab1795984363.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1848
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe"
  2⤵
  PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1848-0-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download