3786cff29938c32a4db0aac5973d04ceee722db44a3172e87238c7ad0c6f88a2 | Triage

Analysis

max time kernel
1563s
max time network
1564s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
20-06-2024 09:27

Sharing

Report Analysis Logs

General

Target

Injector-x64-SEH-On.exe
Size

32KB
MD5

727b7402379beb97ff2f5fb5db4f0ea8
SHA1

c9cae107f9ee66048a175082201524f7ed99bb26
SHA256

3786cff29938c32a4db0aac5973d04ceee722db44a3172e87238c7ad0c6f88a2
SHA512

0a82b7ce418bfaf169dc722593eb3f3873df745c669008be68afc5ff7486d3852bdb0a3c4b67fcb146a1c21c61ac321c865a76f043200deddace513915a4a9b0
SSDEEP

768:1HZtwPJRlNhSP00F0H6BApWv4JLuNbNwFH5gsuce:1UPJ7NhSP00F0HCApWUqhqvRe

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2440	2360	Injector-x64-SEH-On.exe	29
PID 2360 wrote to memory of 2440	2360	Injector-x64-SEH-On.exe	29
PID 2360 wrote to memory of 2440	2360	Injector-x64-SEH-On.exe	29

C:\Users\Admin\AppData\Local\Temp\Injector-x64-SEH-On.exe
"C:\Users\Admin\AppData\Local\Temp\Injector-x64-SEH-On.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads