Analysis
- max time kernel
51s - max time network
53s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 01:14
General
- Target ab512dde369fc42eb0886e1aeb9ff167d8ab555d05ae1e7039e0060be39d916f.exe
- Size 821KB
- Sample240613-bl6nassdnn
- SHA256 ab512dde369fc42eb0886e1aeb9ff167d8ab555d05ae1e7039e0060be39d916f
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab512dde369fc42eb0886e1aeb9ff167d8ab555d05ae1e7039e0060be39d916f.exe"C:\Users\Admin\AppData\Local\Temp\ab512dde369fc42eb0886e1aeb9ff167d8ab555d05ae1e7039e0060be39d916f.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ab512dde369fc42eb0886e1aeb9ff167d8ab555d05ae1e7039e0060be39d916f.exe"{path}"2⤵
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2424-9-0x0000000000400000-0x000000000042F000-memory.dmp
memory/2424-14-0x00000000015B0000-0x00000000018FA000-memory.dmp
memory/2424-12-0x00000000015B0000-0x00000000018FA000-memory.dmp
memory/2424-11-0x0000000000400000-0x000000000042F000-memory.dmp
memory/5112-3-0x0000000003090000-0x000000000309C000-memory.dmp
memory/5112-5-0x00000000751EE000-0x00000000751EF000-memory.dmp
memory/5112-6-0x00000000751E0000-0x0000000075990000-memory.dmp
memory/5112-7-0x0000000005DF0000-0x0000000005E7C000-memory.dmp
memory/5112-8-0x0000000008200000-0x0000000008234000-memory.dmp
memory/5112-4-0x0000000005850000-0x00000000058E2000-memory.dmp
memory/5112-0-0x00000000751EE000-0x00000000751EF000-memory.dmp
memory/5112-2-0x00000000057B0000-0x000000000584C000-memory.dmp
memory/5112-13-0x00000000751E0000-0x0000000075990000-memory.dmp
memory/5112-1-0x0000000000CB0000-0x0000000000D84000-memory.dmp