Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/06/2024, 01:06

General

  • Target
    7250a15983e9f9b6f92c2c41b867bcbdca530bd41af97ff7b21f43cc9eaf27c4.exe
  • Size 4.2MB
  • Sample240607-bf4azseh4w
  • SHA256 7250a15983e9f9b6f92c2c41b867bcbdca530bd41af97ff7b21f43cc9eaf27c4
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7250a15983e9f9b6f92c2c41b867bcbdca530bd41af97ff7b21f43cc9eaf27c4.exe
    "C:\Users\Admin\AppData\Local\Temp\7250a15983e9f9b6f92c2c41b867bcbdca530bd41af97ff7b21f43cc9eaf27c4.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2780
    • C:\Users\Admin\AppData\Local\Temp\32B4.tmp
      "C:\Users\Admin\AppData\Local\Temp\32B4.tmp" --splashC:\Users\Admin\AppData\Local\Temp\7250a15983e9f9b6f92c2c41b867bcbdca530bd41af97ff7b21f43cc9eaf27c4.exe A81E8B20D2BFC453F7B8A407FE5E1E7089EFC88F09CC23C9F54BEBFC89F69D2625CA9E3DDB42DB37E1FAB7A4B423265E472BDAB19BB2219778941ADF04F37BC3
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2616

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        32B4.tmp

        • Path \Users\Admin\AppData\Local\Temp\32B4.tmp
        • Size 4.2MB
        • SHA256 264062e182cacf58614654aa87d7798de9c1d3f7e33d9bfc3da906334e0d1a8f
        • MD5 SHA1 SHA512 SSDEEP

        memory/2616-9-0x0000000000400000-0x0000000000849000-memory.dmp

        memory/2780-0-0x0000000000400000-0x0000000000849000-memory.dmp