ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc | Triage

Analysis

max time kernel
39s
max time network
42s
platform
windows7_x64
resource
win7-20220414-en
submitted
18-04-2022 23:31

Sharing

Report Analysis Logs

General

Target

ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
Size

37KB
MD5

71b2ad584bfb94c006c648e401efeead
SHA1

39b27de81915b748ec56d1c5df7e017b4a20323b
SHA256

ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc
SHA512

4491f9ca9845093f48b8f755ba2da23976a4a399b798256a838052b8bad095465d36b375c16635c65c05b248769e809133fb983eb4f354fdd89c45c618d0321c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes:

ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe

pid	process
1892	ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
1892	ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
1892	ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
1892	ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
1892	ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
1892	ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe

C:\Users\Admin\AppData\Local\Temp\ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
"C:\Users\Admin\AppData\Local\Temp\ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1892-54-0x00000000756A1000-0x00000000756A3000-memory.dmp

Filesize
8KB

Download