f62d173ec06a7771e6886cad671da1fa2732cc0f37677a3c86cbf9e1c4a5476b | Triage

Analysis

max time kernel
52s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
19-04-2022 04:20

Sharing

Report Analysis Logs

General

Target

fw5.exe
Size

6KB
MD5

50c843b71881754290f8c4ef57215dd0
SHA1

99a6e3218596173347b24f8b9435ce07718bfed2
SHA256

f62d173ec06a7771e6886cad671da1fa2732cc0f37677a3c86cbf9e1c4a5476b
SHA512

37b223e74282ae607c64eb5327e8a5b014425055a191a5fd622d550914d8a62aef29b03bef20c72a30d638e8d18e51841105e8038e686ad18d67dda8a07617ef

Score

7^/10

Malware Config

Signatures

Drops startup file 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj9i9kKdvcYJ3VDd.exe	fw5.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj9i9kKdvcYJ3VDd.exe	fw5.exe

C:\Users\Admin\AppData\Local\Temp\fw5.exe
"C:\Users\Admin\AppData\Local\Temp\fw5.exe"
1⤵
- Drops startup file
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-54-0x00000000761F1000-0x00000000761F3000-memory.dmp

Filesize
8KB

Download