b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763 | Triage

Analysis

max time kernel
7s
max time network
32s
platform
windows7_x64
resource
win7v20210408
submitted
15-05-2021 14:29

Sharing

Report Analysis Logs

General

Target

b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763.exe
Size

1.5MB
MD5

6f4a3bce5a21f15c57b1fb175048a374
SHA1

0c6fbba46356f5ed4a11b593fafd6cb89ee95038
SHA256

b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763
SHA512

4dc04f30ee1a2631a34012aa374367fef8c4f20315169c8cb8cac08cc52cfc186b4346dbba827417d16ea38f860648eade75d035e3631f0f16ba6c3b7e31d719

Score

1^/10

Malware Config

Signatures

Suspicious use of UnmapMainImage 1 IoCs

Processes:

b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763.exe

pid process

1824 b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763.exe

C:\Users\Admin\AppData\Local\Temp\b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763.exe
"C:\Users\Admin\AppData\Local\Temp\b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763.exe"
1⤵
- Suspicious use of UnmapMainImage
PID:1824

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1824-60-0x0000000075801000-0x0000000075803000-memory.dmp

Filesize
8KB

Download
memory/1824-61-0x0000000001E50000-0x0000000001F25000-memory.dmp

Filesize
852KB

Download