Analysis
-
max time kernel
14s -
max time network
21s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
13-07-2024 08:48
Behavioral task
behavioral1
Sample
IntelxTool.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
IntelxTool.exe
Resource
win10v2004-20240709-en
General
-
Target
IntelxTool.exe
-
Size
15.7MB
-
MD5
9f8ed6b015d889b3155b9a47dbabacc3
-
SHA1
0f8ee1ba1dd4daf64f4ae8d585b75ecd0e26f1de
-
SHA256
08c917e7e0f4d7ee56733f0034702e4f7ccba6d104cc9165541640c3558740b2
-
SHA512
52e1e2c7c3915bef59e7d58b30f92748791cbe958630946ddbf873a489dac32e21e3420657086fb3b3d5ac6d7f0c1eac57a86d9fa73e364bd628e21027c00a1c
-
SSDEEP
393216:qrVM83pTykULx13l/uFsMlst0rL/y/pWu4kRGtrbvMWyW:qrVM83p23C9603y/pW2WZ
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2880 IntelxTool.exe -
resource yara_rule behavioral1/files/0x00040000000194ec-22.dat upx behavioral1/memory/2880-24-0x000007FEF5F70000-0x000007FEF6558000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1272 wrote to memory of 2880 1272 IntelxTool.exe 29 PID 1272 wrote to memory of 2880 1272 IntelxTool.exe 29 PID 1272 wrote to memory of 2880 1272 IntelxTool.exe 29
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5bb46b85029b543b70276ad8e4c238799
SHA1123bdcd9eebcac1ec0fd2764a37e5e5476bb0c1c
SHA25672c24e1db1ba4df791720a93ca9502d77c3738eebf8b9092a5d82aa8d80121d0
SHA5125e993617509c1cf434938d6a467eb0494e04580ad242535a04937f7c174d429da70a6e71792fc3de69e103ffc5d9de51d29001a4df528cfffefdaa2cef4eaf31