789dac80d04822255d821a716b50a7ce37d1547aaf0ae46c98ed90ee6fd7b6c0 | Triage

Analysis

max time kernel
140s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
14-05-2022 13:24

Sharing

Report Analysis Logs

General

Target

1988-73-0x0000000000400000-0x000000000042B000-memory.exe
Size

172KB
MD5

90cd67cae45fa9cf0ac3c2aaa51621a6
SHA1

2c4a69764c7ef54ee5fd3b65c7c2b542694b41fb
SHA256

789dac80d04822255d821a716b50a7ce37d1547aaf0ae46c98ed90ee6fd7b6c0
SHA512

91295de78418182cb501f66bb5a3f1aeb8cc605b4da2ab7ecb65ae1c12b01f6f55fde4dd55a430e1d97871568ae7edc091efd28789f3fecd98a3b72a4b165a82

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

1988-73-0x0000000000400000-0x000000000042B000-memory.exe

pid process

4280 1988-73-0x0000000000400000-0x000000000042B000-memory.exe
4280 1988-73-0x0000000000400000-0x000000000042B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1988-73-0x0000000000400000-0x000000000042B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1988-73-0x0000000000400000-0x000000000042B000-memory.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4280-130-0x0000000001530000-0x000000000187A000-memory.dmp

Filesize
3.3MB

Download