Analysis

  • max time kernel
    16s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220331-en
  • submitted
    03-04-2022 12:14

General

  • Target

    1556-59-0x0000000000400000-0x0000000000429000-memory.exe

  • Size

    164KB

  • MD5

    dc26f912ddfbd375c3ab80c3be5fd50f

  • SHA1

    7f26154d452f0bb2ed065481ae3a23d1aa98173e

  • SHA256

    bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6

  • SHA512

    034504f5fad9b32f021265ecbfa87861eb18957a930f28a08a4fc8a50c286227d30c8b4343769137c0f31f309c3b65d92e363713b4488a2e227d57caef1b08ae

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1556-59-0x0000000000400000-0x0000000000429000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1556-59-0x0000000000400000-0x0000000000429000-memory.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1680-54-0x00000000008D0000-0x0000000000BD3000-memory.dmp
    Filesize

    3.0MB