b042e4bdfe19df2aa474fd5e2294aecc9a07d447c96466db7a7e20316d885634 | Triage™

Analysis

max time kernel
16s
max time network
114s
platform
windows10_x64
resource
win10v20201028
submitted
09/11/2020, 20:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
384b0d9dfb95b569779a0d9971adedce.exe
Size 350KB
Sample201109-pspvthepva
SHA256 b042e4bdfe19df2aa474fd5e2294aecc9a07d447c96466db7a7e20316d885634
MD5 384b0d9dfb95b569779a0d9971adedce
SHA1 90dc42555e12af423038ef46e5d172f1283c3163
SHA512 8ddf12c1a42c070cafc5c4f4f231705b0fa317f03dc955ae0416b6d30352800c60d3a85488512abcc859f8b93ddf5eb262250101b9b2607306841c1659d9c281
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3372	384b0d9dfb95b569779a0d9971adedce.exe
3372	384b0d9dfb95b569779a0d9971adedce.exe

C:\Users\Admin\AppData\Local\Temp\384b0d9dfb95b569779a0d9971adedce.exe
"C:\Users\Admin\AppData\Local\Temp\384b0d9dfb95b569779a0d9971adedce.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3372-0-0x00000000002BD000-0x000000000031F000-memory.dmp

Download