Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09-03-2024 19:23
Static task
static1
Behavioral task
behavioral1
Sample
MiniMeters-Setup-0.8.17.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
MiniMeters-Setup-0.8.17.exe
Resource
win10v2004-20240226-en
General
-
Target
MiniMeters-Setup-0.8.17.exe
-
Size
28.8MB
-
MD5
3e67c0738f2cad77dd97c7e562b3df91
-
SHA1
41bdb40130355006abc7a2111908a2e05853a720
-
SHA256
4be0579caced466793d2cecf8332596122761c0f85dcb1149a553cf64ad3108f
-
SHA512
8acdc88c80626fc923b22febc92aa6cb0bb701737faddfd6b4ec1299a9b03d3776bbb38af293c1493e34f9a1e716ade535af176c2d97c345af52e405b7e75d98
-
SSDEEP
786432:3OZWTstUVwIWzalbYXHuBvP57VrRu3mP+9ZTiYWb:KWTstUVwZ2bYXOBvB7wp9ZTi
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 4156 MiniMeters-Setup-0.8.17.tmp -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4988 wrote to memory of 4156 4988 MiniMeters-Setup-0.8.17.exe 90 PID 4988 wrote to memory of 4156 4988 MiniMeters-Setup-0.8.17.exe 90 PID 4988 wrote to memory of 4156 4988 MiniMeters-Setup-0.8.17.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\MiniMeters-Setup-0.8.17.exe"C:\Users\Admin\AppData\Local\Temp\MiniMeters-Setup-0.8.17.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4988 -
C:\Users\Admin\AppData\Local\Temp\is-PS6JM.tmp\MiniMeters-Setup-0.8.17.tmp"C:\Users\Admin\AppData\Local\Temp\is-PS6JM.tmp\MiniMeters-Setup-0.8.17.tmp" /SL5="$12004C,29353594,831488,C:\Users\Admin\AppData\Local\Temp\MiniMeters-Setup-0.8.17.exe"2⤵
- Executes dropped EXE
PID:4156
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
MD534e2687b23136b3e3283138144e03e98
SHA1f76e71aefd3e1f0e6d83b70dbf82e56c9e261dd9
SHA2565c046f9c87dac065ea1239321d01bc2dc44cc60fc542839080bb966f7b1b1ddd
SHA5124f9ec7c4a302f4dab77c722f4ad4749fa9e3d0c8481281d23ea4186331c71a3a96a9d1b225acd617376c5b3677e37816fa3edaf0346862689aff47eb5653d9dd