1f2809beeabff8059776600d1952e0fb404d6fa53c6690439d8e072b739b0ea5 | Triage

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/09/2024, 19:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

launcher.exe
Size

251KB
MD5

f71fc206efa0533dc5a9bdce59fd342e
SHA1

077e3d50d9db91cb943c6dcdfb8913b6b4e8bfda
SHA256

98d7a0cf5249443da87cc97998d885ed9811bd0790d49c8ee45577e54296acc6
SHA512

2913315fdc26efced8114173761a20c52705778d8fe65a84fc6ca99e8218bf85eabec67a4693dfa9e57596d9e85597aca0d7fafc18b649a2c7b0fa71062daa8e
SSDEEP

6144:gOVTVeCsKa7UnHzvg9hGm/J0KSVEf6TUIa1bq/KMwZ:W6a7R94mmKdf6Ja

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 5108 wrote to memory of 3156	5108	launcher.exe	84
PID 5108 wrote to memory of 3156	5108	launcher.exe	84

C:\Users\Admin\AppData\Local\Temp\launcher.exe
"C:\Users\Admin\AppData\Local\Temp\launcher.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5108
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:3156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads