Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    11-02-2022 04:55

General

  • Target

    864-62-0x0000000072480000-0x00000000724A9000-memory.exe

  • Size

    164KB

  • MD5

    0c480318d5b82c12c4840f25b28c6f4e

  • SHA1

    9e1d7a0e1bdddc56ffac93be32ca3bb67a5ee194

  • SHA256

    e90c2e5873df18e8afb63f747ebad09fdd7db2fe24fe4b60beefe6530d6a0c14

  • SHA512

    3c2214fba2ede464bb7577de45a0db76ad610277e7f8e1c6f803a2199127aa5c24da00ede8f989071bcf5be22e84a1b188121131d805137d1f5f1dd14838ff3b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\864-62-0x0000000072480000-0x00000000724A9000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\864-62-0x0000000072480000-0x00000000724A9000-memory.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1580-54-0x0000000000900000-0x0000000000C03000-memory.dmp
    Filesize

    3.0MB