Analysis

  • max time kernel
    46s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    19-06-2024 14:24

General

  • Target

    massdm_1.exe

  • Size

    8.2MB

  • MD5

    fee6942d5431bf2b6eaa4fc9e9ebf043

  • SHA1

    4ff6b253086af0744dab4df921c72a6b6c345e8f

  • SHA256

    275aacc2cec3ea050be9fb7aae0a2325d24fc5381152a4e667fb2f06658a0136

  • SHA512

    9598d02825ba10850be406686180023f5a54e76a849173e448a9085923066c15b95fe14551a5484d967b533a8b1052aa042f24fe85353df80bc7b0b6f605b803

  • SSDEEP

    196608:jjr+gp1Dw9onJ5hrZERF//Q3jo4UR7+xpIrh6xDnikGZ0Ap:FpNw9c5hlERV/A2RSx6ElikG

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\massdm_1.exe
    "C:\Users\Admin\AppData\Local\Temp\massdm_1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Users\Admin\AppData\Local\Temp\massdm_1.exe
      "C:\Users\Admin\AppData\Local\Temp\massdm_1.exe"
      2⤵
      • Loads dropped DLL
      PID:2748
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:2636

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\_MEI28882\python39.dll

      Filesize

      4.2MB

      MD5

      c4b75218b11808db4a04255574b2eb33

      SHA1

      f4a3497fb6972037fb271cfdc5b404a4b28ccf07

      SHA256

      53f27444e1e18cc39bdb733d19111e392769e428b518c0fc0839965b5a5727a2

      SHA512

      0b7ddbe6476cc230c7bdd96b5756dfb85ab769294461d1132f0411502521a2197c0f27c687df88a2cd1ab53332eaa30f17fa65f93dac3f5e56ed2b537232e69c