f6787d31ffd66853f1c15c4b7de175a76e02b6fe36523ebf97e3622cf3111dc7 | Triage

Analysis

max time kernel
44s
max time network
16s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 21:27 UTC

Sharing

Report Analysis Logs

General

Target

Fight To The Death.exe
Size

13.0MB
MD5

a19cf172e3828f190e416be5ad28415f
SHA1

9f7232e5bf4dcc64348dce04be0db137cda306d4
SHA256

f6787d31ffd66853f1c15c4b7de175a76e02b6fe36523ebf97e3622cf3111dc7
SHA512

024ddde4ba83bccfb142feadda18db16025c57830ce8637f5682f9d896621a3a354e2287546f717c71bf00c6faa64edca8b480a41687c8c37dff67c7ab0c80d2
SSDEEP

393216:Wu7L/povKmr2pu0tTtdQuslSl9DoWOv+9fqX8hXd:WCLRoKmr2puI5dQu9xorvSiMhX

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2420	Fight To The Death.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2872 wrote to memory of 2420	2872	Fight To The Death.exe	28
PID 2872 wrote to memory of 2420	2872	Fight To The Death.exe	28
PID 2872 wrote to memory of 2420	2872	Fight To The Death.exe	28

C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe
"C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2872
- C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe
  "C:\Users\Admin\AppData\Local\Temp\Fight To The Death.exe"
  2⤵
  - Loads dropped DLL
  PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI28722\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit