Analysis

  • max time kernel
    59s
  • max time network
    110s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    18-01-2021 18:25

General

  • Target

    RFQUOTE_JANUARY_STOCKLIST_18TH.exe

  • Size

    1.5MB

  • MD5

    c94e30adf3bdd6d0316071781d5803b9

  • SHA1

    fb98cb99a63ba3b6344700a6d5e2abcdd6d9e96c

  • SHA256

    50835c6c6d8bd3415be9849c272876e863b792c035f052a03449aefb646a600a

  • SHA512

    3f671796011f1964dbfef62dfc4815577390e15d7fc59f62bb2883f1ae709028e403ec194fed6bd02b8e2e48fa24f71dc0c725ab5016f532ee30b47805899be9

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\RFQUOTE_JANUARY_STOCKLIST_18TH.exe
    "C:\Users\Admin\AppData\Local\Temp\RFQUOTE_JANUARY_STOCKLIST_18TH.exe"
    1⤵
      PID:576

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/576-2-0x0000000073560000-0x0000000073C4E000-memory.dmp
      Filesize

      6.9MB

    • memory/576-3-0x00000000004D0000-0x00000000004D1000-memory.dmp
      Filesize

      4KB

    • memory/576-5-0x0000000004F90000-0x0000000004F91000-memory.dmp
      Filesize

      4KB

    • memory/576-6-0x0000000005530000-0x0000000005531000-memory.dmp
      Filesize

      4KB

    • memory/576-7-0x00000000050D0000-0x00000000050D1000-memory.dmp
      Filesize

      4KB

    • memory/576-8-0x0000000005050000-0x0000000005051000-memory.dmp
      Filesize

      4KB

    • memory/576-9-0x00000000052E0000-0x00000000052E1000-memory.dmp
      Filesize

      4KB

    • memory/576-10-0x0000000005070000-0x0000000005071000-memory.dmp
      Filesize

      4KB

    • memory/576-11-0x0000000005A30000-0x0000000005A31000-memory.dmp
      Filesize

      4KB

    • memory/576-12-0x00000000052B0000-0x00000000052C3000-memory.dmp
      Filesize

      76KB