Analysis
- max time kernel
122s - max time network
126s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
- submitted
08/01/2024, 03:51
General
- Target 百度营销王9.0/E路采集王.exe
- Size 172KB
- Sample240108-eespmsbfd3
- SHA256 54f75b7e43147f4743f0872834068239e9a9162725a27abe2b7f27a91f7331c2
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\百度营销王9.0\E路采集王.exe"C:\Users\Admin\AppData\Local\Temp\百度营销王9.0\E路采集王.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exedw20.exe -x -s 4202⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1444-0-0x000007FEF5C10000-0x000007FEF65AD000-memory.dmp
memory/1444-1-0x00000000002D0000-0x0000000000350000-memory.dmp
memory/1444-2-0x000007FEF5C10000-0x000007FEF65AD000-memory.dmp
memory/1444-4-0x000007FEF5C10000-0x000007FEF65AD000-memory.dmp
memory/1444-5-0x00000000002D0000-0x0000000000350000-memory.dmp
memory/2544-3-0x00000000004B0000-0x00000000004B1000-memory.dmp
memory/2544-6-0x00000000004B0000-0x00000000004B1000-memory.dmp