Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
21/04/2024, 01:41
General
-
Target
GRF Editor Installer.exe
-
Size
5.2MB
-
MD5
4030b9490575789401f78dda26dfe477
-
SHA1
fd24d47423b99412a73a60c9f42c4799ba8574bc
-
SHA256
3f2604a40e06bb5528821fbe5e08def0b063bc4b4c77f5c8ea50893997787283
-
SHA512
34e411e2fc6ec5bacae587c662fd166834781530bb81770febf8af4b713f3219578dd60d29513ad153f3e5397fbe66f8d574fd134734730d5d3e883da420837f
-
SSDEEP
98304:8SiTMLI6YBWbdVgoXrKUH9q95n0lcp764fg15Adx8/vTlMNRXTJgnPcM5:fLI6YBwDgo+mqn7Y/50BRjJ8cS
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GRF Editor Installer.exe"C:\Users\Admin\AppData\Local\Temp\GRF Editor Installer.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-M25EQ.tmp\GRF Editor Installer.tmp"C:\Users\Admin\AppData\Local\Temp\is-M25EQ.tmp\GRF Editor Installer.tmp" /SL5="$9003E,4552048,831488,C:\Users\Admin\AppData\Local\Temp\GRF Editor Installer.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
MD56522639e7cff9bb0bdad5a2be75b0908
SHA127ad8f895a6dc49d9fdd9413210d4d0eb914f9b0
SHA2567ad24cb285c46aad5c94609d3b3836930b8b9f56c5f1bc3a78d9820027348e16
SHA5121d30a3fba73edd25f7ac9f903fc1cd66059c84856df22e729d6b23e495a5826248318c16c8c8677e76357784f9e362d957759e033ea1308916b5eb7d14bc6dc0
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
4KB