dd5029a2dc33c7c3f93d60fb11dc7123719da9bb89c2c0d7191483694f9d37ec | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 17:42

Sharing

Report Analysis Logs

General

Target

751f27310d319973ebda39f59fa2d004.exe
Size

20KB
MD5

751f27310d319973ebda39f59fa2d004
SHA1

b427744b2781bc344b96907bf7d68719e65e9dcb
SHA256

dd5029a2dc33c7c3f93d60fb11dc7123719da9bb89c2c0d7191483694f9d37ec
SHA512

60a891dbb202028fa0984e23005b29a013b3dd885385c2ca0d5650ede5794490faee30cd1c47153b10a83fdcb15f900da6dc7e562c9d6272728ffea908c47564
SSDEEP

384:vMCplENKgMwW6nyI4GS1dmrREBmhIbDLUBrxIaa:vM0lEN/uCug2bDLSu

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

751f27310d319973ebda39f59fa2d004.exe

description	pid	Process	procid_target
PID 2188 wrote to memory of 2868	2188	751f27310d319973ebda39f59fa2d004.exe	28
PID 2188 wrote to memory of 2868	2188	751f27310d319973ebda39f59fa2d004.exe	28
PID 2188 wrote to memory of 2868	2188	751f27310d319973ebda39f59fa2d004.exe	28
PID 2188 wrote to memory of 2868	2188	751f27310d319973ebda39f59fa2d004.exe	28

C:\Users\Admin\AppData\Local\Temp\751f27310d319973ebda39f59fa2d004.exe
"C:\Users\Admin\AppData\Local\Temp\751f27310d319973ebda39f59fa2d004.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe
  2⤵
  PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2188-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2188-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download