d5428c33e4529ecf6c9c4b338a65c7f9d990f956744da9a8089d6b9a0156f9f9 | Triage

Analysis

max time kernel
58s
max time network
67s
platform
windows7_x64
resource
win7
submitted
09-07-2020 11:35

Sharing

Report Analysis Logs

General

Target

PO #0471309 Maysville.exe
Size

566KB
MD5

cd6759742e0ec16e7f6089b14edd87a5
SHA1

caac98062d6f6c386ae7ccfbd586996087541d91
SHA256

d5428c33e4529ecf6c9c4b338a65c7f9d990f956744da9a8089d6b9a0156f9f9
SHA512

d8d3902b8202eb430224a7934c1f33dedce038f28f78f4531c94d2f6d9e2ee60981f218d471c27a1d9b79cb41ef42c6c61cbd194cb40e5cb4e9dc90eba416693

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

PO #0471309 Maysville.exe

pid process

1456 PO #0471309 Maysville.exe

C:\Users\Admin\AppData\Local\Temp\PO #0471309 Maysville.exe
"C:\Users\Admin\AppData\Local\Temp\PO #0471309 Maysville.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...