Analysis
-
max time kernel
22s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-02-2024 20:18
Behavioral task
behavioral1
Sample
Fight To The Death.exe
Resource
win7-20240221-en
General
-
Target
Fight To The Death.exe
-
Size
13.0MB
-
MD5
a19cf172e3828f190e416be5ad28415f
-
SHA1
9f7232e5bf4dcc64348dce04be0db137cda306d4
-
SHA256
f6787d31ffd66853f1c15c4b7de175a76e02b6fe36523ebf97e3622cf3111dc7
-
SHA512
024ddde4ba83bccfb142feadda18db16025c57830ce8637f5682f9d896621a3a354e2287546f717c71bf00c6faa64edca8b480a41687c8c37dff67c7ab0c80d2
-
SSDEEP
393216:Wu7L/povKmr2pu0tTtdQuslSl9DoWOv+9fqX8hXd:WCLRoKmr2puI5dQu9xorvSiMhX
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2824 Fight To The Death.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2740 wrote to memory of 2824 2740 Fight To The Death.exe 28 PID 2740 wrote to memory of 2824 2740 Fight To The Death.exe 28 PID 2740 wrote to memory of 2824 2740 Fight To The Death.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe"C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2740 -
C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe"C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe"2⤵
- Loads dropped DLL
PID:2824
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
MD583129263fa36f434be4ee8356eefb5b0
SHA17733eb1ff1e645a4fb7d86cb212eb7207889b023
SHA25640b01a0ad47ba97710643878108b123d47e74ed3afd88dd1e57cea4df81ff53f
SHA512d73a4067c82a87d903d26056a51de78e021d4c680ed9ebade7354154673d4ae2baa864e1ac195c0e1dadf2349f046a805034536d2c90a0c14698728803457706
-
Filesize
657KB
MD5658b9ca54ebb191532d7ab0cdf37a051
SHA196384e65d4a2cefa52cc16e6403d0cdb7c772cc5
SHA2560e988cec9a4a979e7656c9cae042334f65ecd09bc896faa03c67d37d205ef15e
SHA512c2ed65ebd954493b5fa07dbf53b5d94e367162cd799dae6b6abc1160e9fe78c601240ede0010d42c2899c0d9a359e28f66e115ea4e96d64b1803b1299188c2ce