4a856fb40c7b92ced99c250cb937c8948786c82c5f93fc81fe367f8d6024ef42 | Triage

Analysis

max time kernel
120s
max time network
133s
platform
windows7_x64
resource
win7-en-20211208
submitted
01-02-2022 07:06

Sharing

Report Analysis Logs

General

Target

4a856fb40c7b92ced99c250cb937c8948786c82c5f93fc81fe367f8d6024ef42.exe
Size

705KB
MD5

76a54691e5df634314f8559272845119
SHA1

c6cb6dd829b587246cc9dc60f303c28d7e2f38d2
SHA256

4a856fb40c7b92ced99c250cb937c8948786c82c5f93fc81fe367f8d6024ef42
SHA512

6f590709dcbcde5c51a99135229b373f9a5d569260ad24d5f3c73f23fbda269984871b87ab1a5433bcd0f7dfd0a1238228332fdd7a489d99e8621dcaee4dadf2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1612	4a856fb40c7b92ced99c250cb937c8948786c82c5f93fc81fe367f8d6024ef42.exe

C:\Users\Admin\AppData\Local\Temp\4a856fb40c7b92ced99c250cb937c8948786c82c5f93fc81fe367f8d6024ef42.exe
"C:\Users\Admin\AppData\Local\Temp\4a856fb40c7b92ced99c250cb937c8948786c82c5f93fc81fe367f8d6024ef42.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1612-55-0x0000000076921000-0x0000000076923000-memory.dmp

Filesize
8KB

Download
memory/1612-56-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download