Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-03-2024 19:23

General

  • Target

    MiniMeters-Setup-0.8.17.exe

  • Size

    28.8MB

  • MD5

    3e67c0738f2cad77dd97c7e562b3df91

  • SHA1

    41bdb40130355006abc7a2111908a2e05853a720

  • SHA256

    4be0579caced466793d2cecf8332596122761c0f85dcb1149a553cf64ad3108f

  • SHA512

    8acdc88c80626fc923b22febc92aa6cb0bb701737faddfd6b4ec1299a9b03d3776bbb38af293c1493e34f9a1e716ade535af176c2d97c345af52e405b7e75d98

  • SSDEEP

    786432:3OZWTstUVwIWzalbYXHuBvP57VrRu3mP+9ZTiYWb:KWTstUVwZ2bYXOBvB7wp9ZTi

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MiniMeters-Setup-0.8.17.exe
    "C:\Users\Admin\AppData\Local\Temp\MiniMeters-Setup-0.8.17.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4988
    • C:\Users\Admin\AppData\Local\Temp\is-PS6JM.tmp\MiniMeters-Setup-0.8.17.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-PS6JM.tmp\MiniMeters-Setup-0.8.17.tmp" /SL5="$12004C,29353594,831488,C:\Users\Admin\AppData\Local\Temp\MiniMeters-Setup-0.8.17.exe"
      2⤵
      • Executes dropped EXE
      PID:4156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\is-PS6JM.tmp\MiniMeters-Setup-0.8.17.tmp

    Filesize

    3.0MB

    MD5

    34e2687b23136b3e3283138144e03e98

    SHA1

    f76e71aefd3e1f0e6d83b70dbf82e56c9e261dd9

    SHA256

    5c046f9c87dac065ea1239321d01bc2dc44cc60fc542839080bb966f7b1b1ddd

    SHA512

    4f9ec7c4a302f4dab77c722f4ad4749fa9e3d0c8481281d23ea4186331c71a3a96a9d1b225acd617376c5b3677e37816fa3edaf0346862689aff47eb5653d9dd

  • memory/4156-6-0x0000000000D40000-0x0000000000D41000-memory.dmp

    Filesize

    4KB

  • memory/4156-9-0x0000000000400000-0x000000000071A000-memory.dmp

    Filesize

    3.1MB

  • memory/4156-12-0x0000000000D40000-0x0000000000D41000-memory.dmp

    Filesize

    4KB

  • memory/4988-0-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/4988-2-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/4988-8-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB