a6beaf180ecbb10d5f12d64d7f111b0a7b7f08ef01080cb5fc9316a45df7660d | Triage

Analysis

max time kernel
149s
max time network
152s
platform
windows10_x64
resource
win10v20210410
submitted
22-07-2021 07:15

Sharing

Report Analysis Logs

General

Target

251c861e3eccd02d7b2535ef55c869ad.exe
Size

1.8MB
MD5

251c861e3eccd02d7b2535ef55c869ad
SHA1

a3c743df09e97c0a45e4871c151eec5db583ac78
SHA256

a6beaf180ecbb10d5f12d64d7f111b0a7b7f08ef01080cb5fc9316a45df7660d
SHA512

3e530e19ece34625d2fc39936eb41f43525d73cb084d729a34e967806c0cf17a912037007f0d1f97c01112f54ea6c5e3a74d40586e4cbb7864477dae5c7b589f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

251c861e3eccd02d7b2535ef55c869ad.exe

pid process

3212 251c861e3eccd02d7b2535ef55c869ad.exe
3212 251c861e3eccd02d7b2535ef55c869ad.exe

C:\Users\Admin\AppData\Local\Temp\251c861e3eccd02d7b2535ef55c869ad.exe
"C:\Users\Admin\AppData\Local\Temp\251c861e3eccd02d7b2535ef55c869ad.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3212-114-0x0000000002290000-0x0000000002442000-memory.dmp

Filesize
1.7MB

Download
memory/3212-115-0x0000000000400000-0x00000000005CA000-memory.dmp

Filesize
1.8MB

Download