Analysis
-
max time kernel
63s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
21-11-2024 08:12
Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20241007-en
General
-
Target
main.exe
-
Size
17.9MB
-
MD5
c5f4d4b49b9d7302ae742d441675162d
-
SHA1
f054dc6950bc0979c2b8871ff666082b91d1f23e
-
SHA256
386cb7bf4bb16a313d0090c8a638fdaea2a206ab781c8f0bf3587f6c5bb7a407
-
SHA512
f4a328bd4a1487585c52e98607e42c6a899e93478ab18ac0e2ec81e7316341c592ce3daaf18e4e9f4ad2428e4bce1734432c66ab31d76030d363e13b755d0a64
-
SSDEEP
393216:KqPnLFXlrp5QMDOETgsvfGVugI0KvED3LwPi0Rq:fPLFXNp5QREpMjnwPM
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2132 main.exe -
resource yara_rule behavioral1/files/0x000400000001ca91-112.dat upx behavioral1/memory/2132-114-0x000007FEF5B00000-0x000007FEF5F6E000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2772 wrote to memory of 2132 2772 main.exe 30 PID 2772 wrote to memory of 2132 2772 main.exe 30 PID 2772 wrote to memory of 2132 2772 main.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378