97cf70062f25b360a517a632165ac3d0f0a28de8cc332438694be046db8d349c | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
16-05-2024 02:29

Sharing

Report Analysis Logs

General

Target

DeskTopTips.exe
Size

71KB
MD5

2808f82f14f3ad923ef92580c344d60b
SHA1

3211fcb41312d5b2956ea3a8c2c6a9fcc2772eb6
SHA256

d25ab97830bac7dffabd23cafa005c069065d836050dfc0c33ee3c1bd699bb66
SHA512

2a64cf6e5b21fc3ad275572ea26610f6eac1ba4329c7f7ff7b90d09d4d9d5b9be3dd15fc688fb8d7d5e5db359adb652333a40576220221f660c734357de0747f
SSDEEP

768:d2JQ9iOdQkMAsxMUz/FR1UcUROgDZU9qZU9dxN9:deBSwPFR6cmOgDpah

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1260 wrote to memory of 1144	1260	DeskTopTips.exe	20

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:1144
- C:\Users\Admin\AppData\Local\Temp\DeskTopTips.exe
  "C:\Users\Admin\AppData\Local\Temp\DeskTopTips.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1144-5-0x00000000020F0000-0x00000000020F1000-memory.dmp

Filesize
4KB

Download
memory/1260-0-0x00000000000F0000-0x0000000000106000-memory.dmp

Filesize
88KB

Download
memory/1260-2-0x0000000000110000-0x0000000000148000-memory.dmp

Filesize
224KB

Download
memory/1260-4-0x00000000001A0000-0x00000000001B0000-memory.dmp

Filesize
64KB

Download