Overview

overview

10

Static

static

10

de.exe

windows7_x64

10

de.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    42s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    19-05-2022 19:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    de.exe

  • Size

    7KB

  • MD5

    add607ff23b2b3a3a577f8c115d422ac

  • SHA1

    820e1e4adcc6563212793c8e9e65ae3f5e74bf77

  • SHA256

    3312ee2ec44c08dd98d55bfc9284997f9f632a62558d8b708576378ebeca622e

  • SHA512

    47fbc50ced4433455056025a584e4b0b3910817886710d336c3a2bdd9f2dac3d25da6fefd527702827f89a50808130e069fb10a310612154484af00e5a02fad6

Score
10/10
suricata

Malware Config

Signatures

  • suricata: ET MALWARE Possible Metasploit Payload Common Construct Bind_API (from server)

    suricata: ET MALWARE Possible Metasploit Payload Common Construct Bind_API (from server)

    suricata

Processes

  • C:\Users\Admin\AppData\Local\Temp\de.exe
    "C:\Users\Admin\AppData\Local\Temp\de.exe"
    1⤵
      PID:1732

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1732-54-0x00000000001D0000-0x0000000000202000-memory.dmp
      Filesize

      200KB

      Download
    • memory/1732-55-0x0000000000210000-0x0000000000249000-memory.dmp
      Filesize

      228KB

      Download
    • memory/1732-57-0x00000000021D0000-0x00000000022D0000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1732-58-0x0000000000270000-0x00000000002DB000-memory.dmp
      Filesize

      428KB

      Download
    • memory/1732-60-0x00000000021D0000-0x00000000022D0000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1732-61-0x00000000004F0000-0x0000000000514000-memory.dmp
      Filesize

      144KB

      Download