4a3838d221150c1f6e65b2813a61f0e2edd9cb488743d246195d861c7acc639f | Triage

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
05/01/2024, 02:26

Sharing

Report Analysis Logs

General

Target

42884a0b1a737ec7280eab1795984363.exe
Size

3KB
MD5

42884a0b1a737ec7280eab1795984363
SHA1

d4c72e4e59ba7c4c9a10c58266765fa62a858bd7
SHA256

4a3838d221150c1f6e65b2813a61f0e2edd9cb488743d246195d861c7acc639f
SHA512

50879fd3b9d90ae506c39f850cdcd12a5b74b9b8ca82749c5b5e1416ad23140b120da55a1751f0a05ce589d81867044388323f4906c4f29602f06f01486d213a

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1788 wrote to memory of 1864	1788	42884a0b1a737ec7280eab1795984363.exe	91
PID 1788 wrote to memory of 1864	1788	42884a0b1a737ec7280eab1795984363.exe	91

C:\Users\Admin\AppData\Local\Temp\42884a0b1a737ec7280eab1795984363.exe
"C:\Users\Admin\AppData\Local\Temp\42884a0b1a737ec7280eab1795984363.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1788
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe"
  2⤵
  PID:1864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1788-0-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download