Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 14:23

General

  • Target
    c6194a98ef7f1eb9ead8369810d5734f.exe
  • Size 823KB
  • Sample240313-rp4acafa21
  • SHA256 ff651366eaa00d866b79e812ce020c40aadfa4bce02e096710798707a3413929
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 2 IoCs
  • Modifies Control Panel 2 IoCs
  • Modifies data under HKEY_USERS 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6194a98ef7f1eb9ead8369810d5734f.exe
    "C:\Users\Admin\AppData\Local\Temp\c6194a98ef7f1eb9ead8369810d5734f.exe"
    1⤵
    • Drops file in Windows directory
    • Modifies Control Panel
    • Modifies data under HKEY_USERS
    PID:2844

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2844-0-0x0000000000400000-0x00000000005A9000-memory.dmp

        memory/2844-1-0x0000000001D40000-0x0000000001D94000-memory.dmp

        memory/2844-2-0x0000000000400000-0x00000000005A9000-memory.dmp

        memory/2844-3-0x0000000001E20000-0x0000000001E21000-memory.dmp

        memory/2844-8-0x0000000000400000-0x00000000005A9000-memory.dmp

        memory/2844-7-0x0000000001DD0000-0x0000000001DD1000-memory.dmp

        memory/2844-6-0x0000000001DE0000-0x0000000001DE1000-memory.dmp

        memory/2844-10-0x0000000001D40000-0x0000000001D94000-memory.dmp

        memory/2844-9-0x0000000001E40000-0x0000000001E41000-memory.dmp

        memory/2844-5-0x0000000001F60000-0x0000000001F61000-memory.dmp

        memory/2844-4-0x0000000001E00000-0x0000000001E01000-memory.dmp

        memory/2844-11-0x0000000001E30000-0x0000000001E31000-memory.dmp

        memory/2844-12-0x0000000001E30000-0x0000000001E31000-memory.dmp