Analysis

  • max time kernel
    121s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 15:13

General

  • Target

    Fully Stopped.exe

  • Size

    635KB

  • MD5

    6b3d71f1d6e9338e732c312b37cb5773

  • SHA1

    9d8cbf3f58472b1e065830b4eec3dd530a256508

  • SHA256

    ca14a59812c41857fe983dfd2131688793fc12fabdd3df7242a1e7b566bcd1ff

  • SHA512

    6c5058896df12cebe393c5d6a598e5cbc7a82a5f1b191cba400acaaedd66ae6e49d3a1571210e2ee35ad5a3d96eec859c7e8075b475f84339f883fe9ec332483

  • SSDEEP

    6144:eAexxfADG6t1CPssz0f1Kc9qGcNfSH/pe4QtvQQHVrAsg36NVq:eAtDG6t1sGcNdlA6C

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Fully Stopped.exe
    "C:\Users\Admin\AppData\Local\Temp\Fully Stopped.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2476
    • C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe
      "C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe" --attach 2476 3149824
      2⤵
        PID:2192

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2476-1-0x0000000000330000-0x0000000000340000-memory.dmp

      Filesize

      64KB

    • memory/2476-0-0x0000000000340000-0x0000000000350000-memory.dmp

      Filesize

      64KB

    • memory/2476-2-0x00000000621A0000-0x00000000621C0000-memory.dmp

      Filesize

      128KB

    • memory/2476-9-0x0000000063050000-0x0000000063060000-memory.dmp

      Filesize

      64KB

    • memory/2476-17-0x000007FFFFEB0000-0x000007FFFFEC0000-memory.dmp

      Filesize

      64KB

    • memory/2476-22-0x0000000063080000-0x0000000063090000-memory.dmp

      Filesize

      64KB

    • memory/2476-23-0x0000000063090000-0x00000000630A0000-memory.dmp

      Filesize

      64KB

    • memory/2476-24-0x0000000000340000-0x0000000000350000-memory.dmp

      Filesize

      64KB

    • memory/2476-26-0x0000000063230000-0x0000000063240000-memory.dmp

      Filesize

      64KB

    • memory/2476-25-0x0000000000330000-0x0000000000340000-memory.dmp

      Filesize

      64KB

    • memory/2476-28-0x0000000063240000-0x0000000063250000-memory.dmp

      Filesize

      64KB

    • memory/2476-27-0x00000000621A0000-0x00000000621C0000-memory.dmp

      Filesize

      128KB

    • memory/2476-29-0x0000000063050000-0x0000000063060000-memory.dmp

      Filesize

      64KB

    • memory/2476-30-0x0000000063250000-0x0000000063260000-memory.dmp

      Filesize

      64KB

    • memory/2476-31-0x0000000063260000-0x0000000063270000-memory.dmp

      Filesize

      64KB

    • memory/2476-32-0x0000000063370000-0x0000000063380000-memory.dmp

      Filesize

      64KB

    • memory/2476-33-0x0000000063380000-0x0000000063390000-memory.dmp

      Filesize

      64KB

    • memory/2476-35-0x0000000063490000-0x00000000634B0000-memory.dmp

      Filesize

      128KB

    • memory/2476-34-0x0000000063080000-0x0000000063090000-memory.dmp

      Filesize

      64KB

    • memory/2476-36-0x00000000634B0000-0x00000000634C0000-memory.dmp

      Filesize

      64KB

    • memory/2476-37-0x0000000063090000-0x00000000630A0000-memory.dmp

      Filesize

      64KB

    • memory/2476-38-0x00000000634C0000-0x00000000634D0000-memory.dmp

      Filesize

      64KB

    • memory/2476-39-0x0000000063230000-0x0000000063240000-memory.dmp

      Filesize

      64KB

    • memory/2476-40-0x00000000636B0000-0x00000000636C0000-memory.dmp

      Filesize

      64KB

    • memory/2476-42-0x0000000063870000-0x0000000063880000-memory.dmp

      Filesize

      64KB

    • memory/2476-41-0x0000000063240000-0x0000000063250000-memory.dmp

      Filesize

      64KB

    • memory/2476-43-0x00000000639D0000-0x00000000639E0000-memory.dmp

      Filesize

      64KB

    • memory/2476-44-0x0000000063250000-0x0000000063260000-memory.dmp

      Filesize

      64KB

    • memory/2476-45-0x0000000063DE0000-0x0000000063DF0000-memory.dmp

      Filesize

      64KB

    • memory/2476-75-0x0000000064990000-0x00000000649A0000-memory.dmp

      Filesize

      64KB

    • memory/2476-74-0x0000000063260000-0x0000000063270000-memory.dmp

      Filesize

      64KB

    • memory/2476-62-0x000007FFFFE80000-0x000007FFFFE90000-memory.dmp

      Filesize

      64KB

    • memory/2476-46-0x000007FFFFEC0000-0x000007FFFFED0000-memory.dmp

      Filesize

      64KB

    • memory/2476-76-0x0000000063370000-0x0000000063380000-memory.dmp

      Filesize

      64KB

    • memory/2476-77-0x0000000064A20000-0x0000000064A30000-memory.dmp

      Filesize

      64KB

    • memory/2476-95-0x000007FFFFE40000-0x000007FFFFE50000-memory.dmp

      Filesize

      64KB

    • memory/2476-96-0x0000000063380000-0x0000000063390000-memory.dmp

      Filesize

      64KB

    • memory/2476-97-0x0000000063490000-0x00000000634B0000-memory.dmp

      Filesize

      128KB

    • memory/2476-98-0x00000000634B0000-0x00000000634C0000-memory.dmp

      Filesize

      64KB

    • memory/2476-99-0x00000000634C0000-0x00000000634D0000-memory.dmp

      Filesize

      64KB

    • memory/2476-100-0x00000000636B0000-0x00000000636C0000-memory.dmp

      Filesize

      64KB

    • memory/2476-101-0x0000000063870000-0x0000000063880000-memory.dmp

      Filesize

      64KB

    • memory/2476-102-0x00000000639D0000-0x00000000639E0000-memory.dmp

      Filesize

      64KB

    • memory/2476-103-0x0000000063DE0000-0x0000000063DF0000-memory.dmp

      Filesize

      64KB

    • memory/2476-104-0x0000000064990000-0x00000000649A0000-memory.dmp

      Filesize

      64KB

    • memory/2476-105-0x0000000064A20000-0x0000000064A30000-memory.dmp

      Filesize

      64KB