37b9722dbf8684aadf2d6017942eae875a63bc668bb830c9ff063522bddbb8e5 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-02-2024 07:37

Sharing

Report Analysis Logs

General

Target

Manual Autopiano.exe
Size

6.7MB
MD5

ec83198059ded0292b82ae9e7b0ad668
SHA1

51a91ca65f8e30179939f2649aef3b6d84092d0a
SHA256

37b9722dbf8684aadf2d6017942eae875a63bc668bb830c9ff063522bddbb8e5
SHA512

f9ae34335ec3a734eba3f5ff4ad3116d70b25f6b6308f51546ff09217db0314752b59e27fc027a0d60391bc695851e7885f4d1eaf6fa05b24061a67eaa2ec3d6
SSDEEP

196608:yrGx7QICteEroXxWVfEqlbkkwR7VTEJ433S6X66Hk:5QInEroXgfEqirRRoJ433S6K6E

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2372	Manual Autopiano.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 2372	2228	Manual Autopiano.exe	29
PID 2228 wrote to memory of 2372	2228	Manual Autopiano.exe	29
PID 2228 wrote to memory of 2372	2228	Manual Autopiano.exe	29

C:\Users\Admin\AppData\Local\Temp\Manual Autopiano.exe
"C:\Users\Admin\AppData\Local\Temp\Manual Autopiano.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Users\Admin\AppData\Local\Temp\Manual Autopiano.exe
  "C:\Users\Admin\AppData\Local\Temp\Manual Autopiano.exe"
  2⤵
  - Loads dropped DLL
  PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI22282\python39.dll

Filesize
4.3MB

MD5
7e9d14aa762a46bb5ebac14fbaeaa238

SHA1
a5d90a7df9b90bdd8a84d7dc5066e4ea64ceb3d9

SHA256
e456ef44b261f895a01efb52d26c7a0c7d7d465b647a7b5592708ebf693f12a3

SHA512
280f16348df1c0953bbc6f37ff277485351171d0545ebe469bacd106d907917f87584154aec0f193f37322bc93ac5433cd9a5b5c7f47367176e5a8b19bbd5023

Download Submit