067fff7b71648cf6582bf7142b68ccc947a0c4f4f10db20161efc51ff1f30f53

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18/03/2025, 14:45

Target

MategolBeamer_v1.3.exe
Size

43.7MB
MD5

95711283dddf320082ee357c6cd6379d
SHA1

68bf89447599a12cbadf80727e2b23233406d2cf
SHA256

067fff7b71648cf6582bf7142b68ccc947a0c4f4f10db20161efc51ff1f30f53
SHA512

77bb193e149cbf70f34c8a04c92b76f8a281b26b5504eb2bd094515f221c6d5f9b195cc20eb15215ceb0691b1e0f55c45ef309307a0e77c80e39b2afa8bc5267
SSDEEP

786432:o3uqLgZ3/66aK8W8Oh12JtEhqKVTa1QtIXO1dyOe4UA1snjyDEZCuA4vKsMrxPZV:oRLg1/QK8WTGPEhqKVTmiIe1QOI8Z4y7

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1012	MategolBeamer_v1.3.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 1012	2036	MategolBeamer_v1.3.exe	30
PID 2036 wrote to memory of 1012	2036	MategolBeamer_v1.3.exe	30
PID 2036 wrote to memory of 1012	2036	MategolBeamer_v1.3.exe	30

C:\Users\Admin\AppData\Local\Temp\MategolBeamer_v1.3.exe
"C:\Users\Admin\AppData\Local\Temp\MategolBeamer_v1.3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Users\Admin\AppData\Local\Temp\MategolBeamer_v1.3.exe
  "C:\Users\Admin\AppData\Local\Temp\MategolBeamer_v1.3.exe"
  2⤵
  - Loads dropped DLL
  PID:1012

C:\Users\Admin\AppData\Local\Temp\_MEI20362\python311.dll

Filesize
5.5MB

MD5
387bb2c1e40bde1517f06b46313766be

SHA1
601f83ef61c7699652dec17edd5a45d6c20786c4

SHA256
0817a2a657a24c0d5fbb60df56960f42fc66b3039d522ec952dab83e2d869364

SHA512
521cde6eaa5d4a2e0ef6bbfdea50b00750ae022c1c7bd66b20654c035552b49c9d2fac18ef503bbd136a7a307bdeb97f759d45c25228a0bf0c37739b6e897bad

Download Submit