Analysis
-
max time kernel
143s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
15/03/2024, 20:16
General
-
Target
SetupShim.exe
-
Size
134KB
-
MD5
6d683c23bab272e6aa3b41167d3cafd3
-
SHA1
1738b9242401846d40be6814d08d6d969aa15394
-
SHA256
7abea50aecce1c28c6312c6554dce3d72165b902241fa3a2b6d3fc09117b57ef
-
SHA512
01818bde9490336914d2190cb9c98ce630fb3eb38634c5d231ba027e6e8b4f0d8fc1554c1094bcf669bdd01e02a98d558c7f73f3ea38b391fab0d3d608d9269b
-
SSDEEP
3072:CIxhlOHEbzW5vMlS6NUX1qo4BE/9ugl+IHhrE90JGsfTyIBvzoTEVhY9HqqXf5I:sHEbzWajik9BEJBr5fTPjwKKxI
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SetupShim.exe"C:\Users\Admin\AppData\Local\Temp\SetupShim.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\SetupFrontEnd.exe"SetupFrontEnd.exe" "C:\Users\Admin\AppData\Local\Temp\SetupShim.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
577B
MD567be229517828a8a7c3589a7736a666f
SHA109143b5f59103608c61d414f403f3cd79fe5b07c
SHA256ebc8f1ba1beaaf2b0c98ca252fd6a25b8bb844397618d6139f6a5deb5bcfdcc8
SHA512252dbd7c7aee33093daa1346654048c15ee1b402b5781cb2e823d414a2f426652e39232e6b3b701472ffca46cdc8c27470f40ebd2e2406eb8d5ebdeaaa764e6d
-
Filesize
104KB
-
Filesize
480KB
-
Filesize
960KB
-
Filesize
10.8MB
-
Filesize
2.0MB
-
Filesize
608KB
-
Filesize
2.0MB
-
Filesize
1008KB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
10.8MB