5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482 | Triage

Analysis

max time kernel
110s
max time network
145s
platform
windows10_x64
resource
win10-en-20211014
submitted
09-11-2021 16:52

Sharing

Report Analysis Logs

General

Target

5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe
Size

13KB
MD5

e89caf09f668b391837686ae29b154a1
SHA1

b4a5d003036f2d39e743bf986f327534224b98c3
SHA256

5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482
SHA512

d6ed22c46032ccb86ae787377b2922d555cf2857c1c2c0ea1a7f593a8f42386c5f912df4f932d214445eca34ae1cc265f258cec5a242025eaef4e690c20cef4a

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

Processes:

5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe

description	ioc	process
File created	C:\Windows\Tasks\wow64.job	5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe
File opened for modification	C:\Windows\Tasks\wow64.job	5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe

C:\Users\Admin\AppData\Local\Temp\5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe
"C:\Users\Admin\AppData\Local\Temp\5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe"
1⤵
- Drops file in Windows directory
PID:2896

C:\Users\Admin\AppData\Local\Temp\5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe
C:\Users\Admin\AppData\Local\Temp\5f7a332560912991f75aa627f88074539253d3abe6c48541569b06c551154482.exe start
1⤵
PID:2712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads