809eb0570ba5abcd4ab012b354b4e1f0311eff595b1988ab0735bf1ab846e632 | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
22/05/2024, 14:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

AptRelay.exe
Size

143KB
MD5

2d10e94899fcd7e450489ab41c987428
SHA1

bd984779aa389508e9b1e95122d213a7e26fddc0
SHA256

544f9e47a7b0d72e6821af9f040af96a2611e6baccd463a6346dceb5ba7ea45c
SHA512

0ee1711659d431922995e9313e550269d059780b7cb35be5ecdac5bcffc43b06f63c930a72040bd6e74b9108664888dc037d9cb5c45dcc823db3db9c9c75f93e
SSDEEP

3072:oS3v8ZDtaslZL9K1HI8TBphODpD8n/CTWmS:oIwtasjL9KxI8b+HA

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2740	2204	AptRelay.exe	28
PID 2204 wrote to memory of 2740	2204	AptRelay.exe	28
PID 2204 wrote to memory of 2740	2204	AptRelay.exe	28
PID 2204 wrote to memory of 2740	2204	AptRelay.exe	28
PID 2204 wrote to memory of 2740	2204	AptRelay.exe	28
PID 2204 wrote to memory of 2740	2204	AptRelay.exe	28
PID 2204 wrote to memory of 2740	2204	AptRelay.exe	28
PID 2204 wrote to memory of 2224	2204	AptRelay.exe	29
PID 2204 wrote to memory of 2224	2204	AptRelay.exe	29
PID 2204 wrote to memory of 2224	2204	AptRelay.exe	29
PID 2204 wrote to memory of 2224	2204	AptRelay.exe	29
PID 2204 wrote to memory of 2224	2204	AptRelay.exe	29
PID 2204 wrote to memory of 2224	2204	AptRelay.exe	29
PID 2204 wrote to memory of 2224	2204	AptRelay.exe	29

C:\Users\Admin\AppData\Local\Temp\AptRelay.exe
"C:\Users\Admin\AppData\Local\Temp\AptRelay.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe
  2⤵
  PID:2740
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe
  2⤵
  PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2204-0-0x0000000000EB0000-0x0000000001024000-memory.dmp

Filesize
1.5MB

Download