ac8f0c166252df15d7f34a134e5cd5919f6076045628b3f4e9540b28900c9e31 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09/09/2024, 00:09

Sharing

Report Analysis Logs

General

Target

TITAN Spoofer.exe
Size

3.7MB
MD5

ee87cef7260f4a32e5e91aff5628d24d
SHA1

b8ec3159e3d59c374d73f05a6ee99c952a3c14ba
SHA256

ac8f0c166252df15d7f34a134e5cd5919f6076045628b3f4e9540b28900c9e31
SHA512

01b16c26a2f8712677e8d8dc67ff2b54008146980ff389eeca816913bd5f41308fbc50135378d1fa575fac8173b8b50fec8bec7b9d4cfa78b224c049d264205e
SSDEEP

49152:m3WUzUdIOIN4vGZrdhrKma0qC1VgCZyvdW1mSztNyu9TzuoH:yXpyVuzOWHZ

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1276 wrote to memory of 2172	1276	TITAN Spoofer.exe	32
PID 1276 wrote to memory of 2172	1276	TITAN Spoofer.exe	32
PID 1276 wrote to memory of 2172	1276	TITAN Spoofer.exe	32

C:\Users\Admin\AppData\Local\Temp\TITAN Spoofer.exe
"C:\Users\Admin\AppData\Local\Temp\TITAN Spoofer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1276
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c CLS
  2⤵
  PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads