Overview

overview

10

Static

static

10

de.exe

windows7_x64

10

de.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    111s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    19-05-2022 19:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    de.exe

  • Size

    7KB

  • MD5

    add607ff23b2b3a3a577f8c115d422ac

  • SHA1

    820e1e4adcc6563212793c8e9e65ae3f5e74bf77

  • SHA256

    3312ee2ec44c08dd98d55bfc9284997f9f632a62558d8b708576378ebeca622e

  • SHA512

    47fbc50ced4433455056025a584e4b0b3910817886710d336c3a2bdd9f2dac3d25da6fefd527702827f89a50808130e069fb10a310612154484af00e5a02fad6

Score
10/10
suricata

Malware Config

Signatures

  • suricata: ET MALWARE Possible Metasploit Payload Common Construct Bind_API (from server)

    suricata: ET MALWARE Possible Metasploit Payload Common Construct Bind_API (from server)

    suricata

Processes

  • C:\Users\Admin\AppData\Local\Temp\de.exe
    "C:\Users\Admin\AppData\Local\Temp\de.exe"
    1⤵
      PID:1740

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1740-130-0x0000000000170000-0x00000000001A2000-memory.dmp
      Filesize

      200KB

      Download
    • memory/1740-131-0x00000000001B0000-0x00000000001E9000-memory.dmp
      Filesize

      228KB

      Download
    • memory/1740-133-0x0000000002490000-0x0000000002590000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1740-134-0x0000000000810000-0x000000000087B000-memory.dmp
      Filesize

      428KB

      Download
    • memory/1740-136-0x0000000002490000-0x0000000002590000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1740-137-0x0000000002590000-0x00000000025B4000-memory.dmp
      Filesize

      144KB

      Download