e7f423cc9ba35d2ea9a7d4dd98991c32058510fefca5a7bfce5026a63f52d5ed | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/02/2024, 22:50

Sharing

Report Analysis Logs

General

Target

Reaper-UWP.exe
Size

17.1MB
MD5

1bd1be2ec93b5938d56a5b91a640ef99
SHA1

5c395ef52ddc2ff86992f3304ec62e35c4dcbb3c
SHA256

e7f423cc9ba35d2ea9a7d4dd98991c32058510fefca5a7bfce5026a63f52d5ed
SHA512

0bc6d69f51932bb18e9c9c9615a28d5efd7c591fafaebaabaa9ec207bf846efdd1bfb220f2158a7f332f3ba6bbc42bb0318a2d97c8a0629fe811233ad467842d
SSDEEP

393216:PiIE7YoPQtsEQETSpvJQ7RkrzGCJd02T:k7rPQtsEQEWphQNDj

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2560	Reaper-UWP.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2740 wrote to memory of 2560	2740	Reaper-UWP.exe	28
PID 2740 wrote to memory of 2560	2740	Reaper-UWP.exe	28
PID 2740 wrote to memory of 2560	2740	Reaper-UWP.exe	28

C:\Users\Admin\AppData\Local\Temp\Reaper-UWP.exe
"C:\Users\Admin\AppData\Local\Temp\Reaper-UWP.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2740
- C:\Users\Admin\AppData\Local\Temp\Reaper-UWP.exe
  "C:\Users\Admin\AppData\Local\Temp\Reaper-UWP.exe"
  2⤵
  - Loads dropped DLL
  PID:2560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI27402\python311.dll

Filesize
5.5MB

MD5
5a5dd7cad8028097842b0afef45bfbcf

SHA1
e247a2e460687c607253949c52ae2801ff35dc4a

SHA256
a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce

SHA512
e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

Download Submit