Analysis
-
max time kernel
93s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
07-12-2024 03:51
Behavioral task
behavioral1
Sample
Muz Is A MONKEY.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Muz Is A MONKEY.exe
Resource
win10v2004-20241007-en
General
-
Target
Muz Is A MONKEY.exe
-
Size
17.9MB
-
MD5
ce143d2bb58f802c3e322d954d5f6211
-
SHA1
1769e2761c95ca6c58348c46e1612711ec7c9e5e
-
SHA256
36f590833cb8de1be11541f36d63fda288e858666dc267f71343a876c0a6e3ec
-
SHA512
81370fb83f3b1ca6fa3e2dc2d33824c368169d0c483dec2cb1effbdb193e996cd440d8cfcb6942f05077fb304fead37cfdd836f8893a6da9619bef312b1bdd3c
-
SSDEEP
393216:oqPnLFXlrRQMDOETgsvfGJgXvJ7vEtsnWkbfq:ZPLFXNRQREmgJgsWZ
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 452 Muz Is A MONKEY.exe -
resource yara_rule behavioral1/files/0x000500000001c881-112.dat upx behavioral1/memory/452-114-0x000007FEF64F0000-0x000007FEF695E000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 376 wrote to memory of 452 376 Muz Is A MONKEY.exe 30 PID 376 wrote to memory of 452 376 Muz Is A MONKEY.exe 30 PID 376 wrote to memory of 452 376 Muz Is A MONKEY.exe 30
Processes
-
C:\Users\Admin\AppData\Local\Temp\Muz Is A MONKEY.exe"C:\Users\Admin\AppData\Local\Temp\Muz Is A MONKEY.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:376 -
C:\Users\Admin\AppData\Local\Temp\Muz Is A MONKEY.exe"C:\Users\Admin\AppData\Local\Temp\Muz Is A MONKEY.exe"2⤵
- Loads dropped DLL
PID:452
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378