Analysis

  • max time kernel
    124s
  • max time network
    179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    17-03-2022 01:27

General

  • Target

    rfusclient.exe

  • Size

    1.5MB

  • MD5

    b8667a1e84567fcf7821bcefb6a444af

  • SHA1

    9c1f91fe77ad357c8f81205d65c9067a270d61f0

  • SHA256

    dc9d875e659421a51addd8e8a362c926369e84320ab0c5d8bbb1e4d12d372fc9

  • SHA512

    ec6af663a3b41719d684f04504746f91196105ef6f8baa013b4bd02df6684eca49049d5517691f8e3a4ba6351fe35545a27f728b1d29d949e950d574a012f852

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\rfusclient.exe
    "C:\Users\Admin\AppData\Local\Temp\rfusclient.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3356-130-0x0000000000400000-0x00000000009B6000-memory.dmp

    Filesize

    5.7MB

  • memory/3356-131-0x0000000000400000-0x00000000009B6000-memory.dmp

    Filesize

    5.7MB

  • memory/3356-132-0x0000000000400000-0x00000000009B6000-memory.dmp

    Filesize

    5.7MB

  • memory/3356-133-0x0000000000400000-0x00000000009B6000-memory.dmp

    Filesize

    5.7MB

  • memory/3356-134-0x0000000000400000-0x00000000009B6000-memory.dmp

    Filesize

    5.7MB

  • memory/3356-135-0x0000000000400000-0x00000000009B6000-memory.dmp

    Filesize

    5.7MB