Analysis

  • max time kernel
    150s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-01-2024 20:04

General

  • Target

    517bc996ca1bd0a4069e109cff1c9bcf.exe

  • Size

    227KB

  • MD5

    517bc996ca1bd0a4069e109cff1c9bcf

  • SHA1

    334e849653632905a71c7afdfc7f1e2b3f27cc44

  • SHA256

    4ef7e23ae13543d794cbf2931fa78cf7bbf7d9c73d953f615570543c9ba1f656

  • SHA512

    e4665b0a1391c634a92f2c2b4eee2cbffc59027796147cafd573b63a0b10cbf31928485540c9853b9bc271044d376ddd159ae1a86da1becef4121d0c78eda75d

  • SSDEEP

    3072:P8xW7VTCsVmuz+Ydh7f/+fmItroNaCKMz5LEK0sdf:HNH1znJfGfptrqg3y

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\517bc996ca1bd0a4069e109cff1c9bcf.exe
    "C:\Users\Admin\AppData\Local\Temp\517bc996ca1bd0a4069e109cff1c9bcf.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:756
    • C:\Windows\explorer.exe
      0000019C*
      2⤵
        PID:3476

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/756-0-0x0000000002260000-0x0000000002285000-memory.dmp

      Filesize

      148KB

    • memory/756-1-0x00000000022C0000-0x0000000002344000-memory.dmp

      Filesize

      528KB

    • memory/756-2-0x0000000000400000-0x0000000000483000-memory.dmp

      Filesize

      524KB

    • memory/756-4-0x0000000002260000-0x0000000002285000-memory.dmp

      Filesize

      148KB

    • memory/756-5-0x00000000022C0000-0x0000000002344000-memory.dmp

      Filesize

      528KB

    • memory/756-6-0x0000000000400000-0x0000000000483000-memory.dmp

      Filesize

      524KB

    • memory/3476-3-0x0000000000100000-0x0000000000112000-memory.dmp

      Filesize

      72KB