Overview

overview

10

Static

static

10

de.exe

windows7_x64

10

de.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    43s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    19-05-2022 19:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    de.exe

  • Size

    7KB

  • MD5

    add607ff23b2b3a3a577f8c115d422ac

  • SHA1

    820e1e4adcc6563212793c8e9e65ae3f5e74bf77

  • SHA256

    3312ee2ec44c08dd98d55bfc9284997f9f632a62558d8b708576378ebeca622e

  • SHA512

    47fbc50ced4433455056025a584e4b0b3910817886710d336c3a2bdd9f2dac3d25da6fefd527702827f89a50808130e069fb10a310612154484af00e5a02fad6

Score
10/10
suricata

Malware Config

Signatures

  • suricata: ET MALWARE Possible Metasploit Payload Common Construct Bind_API (from server)

    suricata: ET MALWARE Possible Metasploit Payload Common Construct Bind_API (from server)

    suricata

Processes

  • C:\Users\Admin\AppData\Local\Temp\de.exe
    "C:\Users\Admin\AppData\Local\Temp\de.exe"
    1⤵
      PID:1580

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1580-54-0x00000000001D0000-0x0000000000202000-memory.dmp
      Filesize

      200KB

      Download
    • memory/1580-55-0x0000000000210000-0x0000000000249000-memory.dmp
      Filesize

      228KB

      Download
    • memory/1580-57-0x00000000021C0000-0x00000000022C0000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1580-58-0x0000000002060000-0x00000000020CB000-memory.dmp
      Filesize

      428KB

      Download
    • memory/1580-60-0x00000000021C0000-0x00000000022C0000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1580-61-0x0000000000250000-0x0000000000274000-memory.dmp
      Filesize

      144KB

      Download