628cd2c380b9928ecb6784c42d9bc263915adaf09bd59ba1a5a4acf4c55a268b | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27/09/2024, 12:48

Sharing

Report Analysis Logs

General

Target

VisionFree1.4.exe
Size

1.8MB
MD5

ff81330d1ab58409f337c00d48edcc35
SHA1

e06e4bf0266e471cc8a35e6d7b1212f73f90d8e1
SHA256

628cd2c380b9928ecb6784c42d9bc263915adaf09bd59ba1a5a4acf4c55a268b
SHA512

a8642248242d7a59d337f8063f9aebee2f016fbe5f6e8390451062ca5dd820754130cfa9799eebe063a7d336afc885d068b4dee01c31981dc69c8e530fe37651
SSDEEP

24576:cN3n+Ftho2t5+eOKgI7VQO2TNmWGWL6tCThxJ4n9AQ88x/sZsIETI5TaKc2JH71F:15IC2U+ol6

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1856 wrote to memory of 2576	1856	VisionFree1.4.exe	31
PID 1856 wrote to memory of 2576	1856	VisionFree1.4.exe	31
PID 1856 wrote to memory of 2576	1856	VisionFree1.4.exe	31

C:\Users\Admin\AppData\Local\Temp\VisionFree1.4.exe
"C:\Users\Admin\AppData\Local\Temp\VisionFree1.4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1856
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c color B
  2⤵
  PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads