d39de54d69c9c0ee00c8e6c82c5e66955f83e1338ab951027c04cde6b0f430b6 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-04-2024 21:07

Sharing

Report Analysis Logs

General

Target

ImgeLoggerBuilder.exe
Size

13.9MB
MD5

a759c3adcd8baffd7d5433bd3c1860d9
SHA1

2b93312d2fb60168faf49d62bd7f73fab3574e5a
SHA256

d39de54d69c9c0ee00c8e6c82c5e66955f83e1338ab951027c04cde6b0f430b6
SHA512

a4bd78510b946d214253cd27f0e55115aa3d027ca7e9af4b87daa4748234625f46d812aad0f5dcdcb1f214dc9318854c90a7633dfd3ffcbb38fe3e7705395bf5
SSDEEP

393216:1au7L/yP8AxYDQdQuslSl9DoWOv+9fVjPwta:wCL5XEdQu9xorvStjb

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

Processes:

ImgeLoggerBuilder.exe

pid process

2424 ImgeLoggerBuilder.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

ImgeLoggerBuilder.exe

pid process

2424 ImgeLoggerBuilder.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

ImgeLoggerBuilder.exe

description	pid	process	target process
PID 2736 wrote to memory of 2424	2736	ImgeLoggerBuilder.exe	ImgeLoggerBuilder.exe
PID 2736 wrote to memory of 2424	2736	ImgeLoggerBuilder.exe	ImgeLoggerBuilder.exe
PID 2736 wrote to memory of 2424	2736	ImgeLoggerBuilder.exe	ImgeLoggerBuilder.exe

C:\Users\Admin\AppData\Local\Temp\ImgeLoggerBuilder.exe
"C:\Users\Admin\AppData\Local\Temp\ImgeLoggerBuilder.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2736

C:\Users\Admin\AppData\Local\Temp\ImgeLoggerBuilder.exe
"C:\Users\Admin\AppData\Local\Temp\ImgeLoggerBuilder.exe"
2⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
PID:2424

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI27362\python310.dll
Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit