6e217c13ce7f7104b9e251f715ed0191d1c6751cd9c4b352320c0314fafbe57e

Analysis

max time kernel
26s
max time network
19s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Unlimited_Crack.exe
Size 364KB
Sample240420-2w46bscb38
SHA256 6e217c13ce7f7104b9e251f715ed0191d1c6751cd9c4b352320c0314fafbe57e
MD5 1b8fb8b2b74de6c36c0bf69a0d2f5664
SHA1 8ea83f1e865a9486b7d9a715728af845db23f63c
SHA512 84dc5ec442558e21bc316dd0745c44d1b57be65c2d8b3326d3c42808977960249ccd9836d7f5fc7e8a17b8d27bf6ebb9671c4a5908f9a1c74c66397ef8859898
SSDEEP 6144:49iJkovicebiNJ0mL2lvArd15G1Yct56vTN19z7yY2lg7mlm1gWnOayBsBGaCv/u:NhaPbiNJFLSAp15Qdsj952ymlxWnjLIu
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1760 set thread context of 2568	1760	Unlimited_Crack.exe	30

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	29
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	29
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	29
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	29
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	29
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	29
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	29
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	30

C:\Users\Admin\AppData\Local\Temp\Unlimited_Crack.exe
"C:\Users\Admin\AppData\Local\Temp\Unlimited_Crack.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1760
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
  2⤵
  PID:2560
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
  2⤵
  PID:2568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1760-0-0x00000000011D0000-0x0000000001232000-memory.dmp

Download

memory/1760-1-0x0000000074B90000-0x000000007527E000-memory.dmp

Download

memory/1760-4-0x0000000002640000-0x0000000004640000-memory.dmp

Download

memory/1760-18-0x0000000074B90000-0x000000007527E000-memory.dmp

Download

memory/2568-10-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-9-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-7-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-11-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-12-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-13-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Download

memory/2568-14-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-5-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-17-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-19-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/2568-20-0x0000000000400000-0x000000000046D000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads