97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082 | Triage

Analysis

max time kernel
92s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
27-05-2022 18:35

Sharing

Report Analysis Logs

General

Target

97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082.exe
Size

612KB
MD5

d6019153d5b7e6b85bc608621529ed10
SHA1

53b72f8150d31f8206cb0a32fbc3939346ffdb17
SHA256

97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082
SHA512

97cda9f493c8da8858f02b5fdf6325e41f99d013c0a2d44a33468768b563cb9f654d2a1afe4ee077b41245fc59576e7e19457bbd5f6d848f244fe067a3cbaff6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082.exe

pid	process
3996	97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082.exe
3996	97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082.exe

C:\Users\Admin\AppData\Local\Temp\97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082.exe
"C:\Users\Admin\AppData\Local\Temp\97c18a16b640056b8baa52a6166530e578d675141dcbb5f025e566ee682a0082.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3996-130-0x0000000000400000-0x00000000004A0000-memory.dmp

Filesize
640KB

Download