Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25-01-2024 17:42
Static task
static1
Behavioral task
behavioral1
Sample
751f27310d319973ebda39f59fa2d004.exe
Resource
win7-20231215-en
1 signatures
150 seconds
General
-
Target
751f27310d319973ebda39f59fa2d004.exe
-
Size
20KB
-
MD5
751f27310d319973ebda39f59fa2d004
-
SHA1
b427744b2781bc344b96907bf7d68719e65e9dcb
-
SHA256
dd5029a2dc33c7c3f93d60fb11dc7123719da9bb89c2c0d7191483694f9d37ec
-
SHA512
60a891dbb202028fa0984e23005b29a013b3dd885385c2ca0d5650ede5794490faee30cd1c47153b10a83fdcb15f900da6dc7e562c9d6272728ffea908c47564
-
SSDEEP
384:vMCplENKgMwW6nyI4GS1dmrREBmhIbDLUBrxIaa:vM0lEN/uCug2bDLSu
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
751f27310d319973ebda39f59fa2d004.exedescription pid process target process PID 4992 wrote to memory of 4280 4992 751f27310d319973ebda39f59fa2d004.exe cmd.exe PID 4992 wrote to memory of 4280 4992 751f27310d319973ebda39f59fa2d004.exe cmd.exe PID 4992 wrote to memory of 4280 4992 751f27310d319973ebda39f59fa2d004.exe cmd.exe