Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
28-11-2024 22:03
Behavioral task
behavioral1
Sample
loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
loader.exe
Resource
win10v2004-20241007-en
General
-
Target
loader.exe
-
Size
7.6MB
-
MD5
86bfd04c02b2022c78eeb53910c08b00
-
SHA1
c944cae39c36330f183ce271cda9a3db110e1abe
-
SHA256
8cc035225b54d104d75f6b01c2d126ae9f47648db3a89901182fc09006c89439
-
SHA512
3960332de9251e6b1dd07b3ce3148b0b5c9cb1ae65df451376346cd56b4fa172f277063eed6f1a11f3c2e4d0b1b943a33a9a6e566999f1fb877b514606046323
-
SSDEEP
196608:hvHYywfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/jk:eIHziK1piXLGVE4Ue0VJI
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
loader.exepid Process 2520 loader.exe -
Processes:
resource yara_rule behavioral1/files/0x000500000001a067-21.dat upx behavioral1/memory/2520-23-0x000007FEF5C80000-0x000007FEF62E3000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
loader.exedescription pid Process procid_target PID 2104 wrote to memory of 2520 2104 loader.exe 30 PID 2104 wrote to memory of 2520 2104 loader.exe 30 PID 2104 wrote to memory of 2520 2104 loader.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD56ef5d2f77064df6f2f47af7ee4d44f0f
SHA10003946454b107874aa31839d41edcda1c77b0af
SHA256ab7c640f044d2eb7f4f0a4dfe5e719dfd9e5fcd769943233f5cece436870e367
SHA5121662cc02635d63b8114b41d11ec30a2af4b0b60209196aac937c2a608588fee47c6e93163ea6bf958246c32759ac5c82a712ea3d690e796e2070ac0ff9104266