97cf70062f25b360a517a632165ac3d0f0a28de8cc332438694be046db8d349c | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 21:46

Sharing

Report Analysis Logs

General

Target

DeskTopTips.exe
Size

71KB
MD5

2808f82f14f3ad923ef92580c344d60b
SHA1

3211fcb41312d5b2956ea3a8c2c6a9fcc2772eb6
SHA256

d25ab97830bac7dffabd23cafa005c069065d836050dfc0c33ee3c1bd699bb66
SHA512

2a64cf6e5b21fc3ad275572ea26610f6eac1ba4329c7f7ff7b90d09d4d9d5b9be3dd15fc688fb8d7d5e5db359adb652333a40576220221f660c734357de0747f
SSDEEP

768:d2JQ9iOdQkMAsxMUz/FR1UcUROgDZU9qZU9dxN9:deBSwPFR6cmOgDpah

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 1204	1724	DeskTopTips.exe	21

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:1204
- C:\Users\Admin\AppData\Local\Temp\DeskTopTips.exe
  "C:\Users\Admin\AppData\Local\Temp\DeskTopTips.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-5-0x0000000002E70000-0x0000000002E71000-memory.dmp

Filesize
4KB

Download
memory/1724-1-0x0000000000130000-0x0000000000146000-memory.dmp

Filesize
88KB

Download
memory/1724-2-0x0000000000150000-0x0000000000188000-memory.dmp

Filesize
224KB

Download
memory/1724-4-0x00000000001A0000-0x00000000001B0000-memory.dmp

Filesize
64KB

Download