Resubmissions
23/02/2024, 15:39
240223-s3ve2add2v723/02/2024, 15:38
240223-s2167acd44423/02/2024, 15:27
240223-sv2jdada917Analysis
- max time kernel
145s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20240221-en - resource tags
- submitted
23/02/2024, 15:27
General
- Target hdsentinel_setup.exe
- Size 34.9MB
- Sample240223-sv2jdada91
- SHA256 df8615fa9e63f9d1b471191c074f93cf9ad7fafe6beb3d7d6a45183437eb3fa5
Score
4/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\hdsentinel_setup.exe"C:\Users\Admin\AppData\Local\Temp\hdsentinel_setup.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-1PEGP.tmp\hdsentinel_setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-1PEGP.tmp\hdsentinel_setup.tmp" /SL5="$70064,36281122,68608,C:\Users\Admin\AppData\Local\Temp\hdsentinel_setup.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
hdsentinel_setup.tmp
memory/912-0-0x0000000000400000-0x0000000000418000-memory.dmp
memory/912-2-0x0000000000400000-0x0000000000418000-memory.dmp
memory/912-13-0x0000000000400000-0x0000000000418000-memory.dmp
memory/1856-7-0x0000000000660000-0x0000000000661000-memory.dmp
memory/1856-14-0x0000000000400000-0x00000000004C0000-memory.dmp
memory/1856-17-0x0000000000660000-0x0000000000661000-memory.dmp