Resubmissions

14-09-2021 08:49

210914-kq3xmsaddj 10

10-09-2021 11:25

210910-njq62sdbaq 10

Analysis

  • max time kernel
    78s
  • max time network
    90s
  • platform
    windows7_x64
  • resource
    win7-en
  • submitted
    10-09-2021 11:25

General

  • Target

    bf091130fc783c47357403716f5c9c217b5ade94f6385df4402e86135ffb8b38.bin.sample.exe

  • Size

    144KB

  • MD5

    6eaaae60fecab071f00a117bf4992165

  • SHA1

    3f84dbcedf11fd985c4400ccf7c028eb3c7cfaf8

  • SHA256

    bf091130fc783c47357403716f5c9c217b5ade94f6385df4402e86135ffb8b38

  • SHA512

    d7768a4cafc855cef3cf41ea5417a2ba9c9847a14fd93d94c3d9c9672f7d2f986cc315cdb753b623aa1101b6da3dce3e839f6b01073b798c0550bcf95a925a1e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bf091130fc783c47357403716f5c9c217b5ade94f6385df4402e86135ffb8b38.bin.sample.exe
    "C:\Users\Admin\AppData\Local\Temp\bf091130fc783c47357403716f5c9c217b5ade94f6385df4402e86135ffb8b38.bin.sample.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1664-53-0x0000000075231000-0x0000000075233000-memory.dmp
    Filesize

    8KB

  • memory/1664-54-0x0000000000BE0000-0x0000000000CA9000-memory.dmp
    Filesize

    804KB

  • memory/1664-56-0x0000000000DC0000-0x0000000000EDF000-memory.dmp
    Filesize

    1.1MB

  • memory/1664-57-0x0000000000370000-0x000000000038F000-memory.dmp
    Filesize

    124KB

  • memory/1664-58-0x00000000025E0000-0x00000000026E9000-memory.dmp
    Filesize

    1.0MB

  • memory/1664-59-0x00000000000E0000-0x00000000000EA000-memory.dmp
    Filesize

    40KB

  • memory/1664-60-0x0000000000210000-0x0000000000211000-memory.dmp
    Filesize

    4KB

  • memory/1664-61-0x0000000000320000-0x0000000000321000-memory.dmp
    Filesize

    4KB

  • memory/1664-62-0x0000000000330000-0x0000000000331000-memory.dmp
    Filesize

    4KB

  • memory/1664-63-0x0000000000340000-0x0000000000346000-memory.dmp
    Filesize

    24KB