fe6e7f3a3ce0393561a60022c5f879edb4c2b70c864012281ee14d282df014eb | Triage™

Analysis

max time kernel
91s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
15/06/2022, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1424-76-0x0000000000400000-0x000000000042C000-memory.exe
Size 176KB
Sample220615-xtzqlsbcbj
SHA256 fe6e7f3a3ce0393561a60022c5f879edb4c2b70c864012281ee14d282df014eb
MD5 2287fc31a65f9a973ca857b6869d24b2
SHA1 d130b12ac6fe068e70fb418aebb3f7dbec0b8e8c
SHA512 8a10710ee7f6afc5ee51321862120a0061af840892b2896012db58ba1e0394e3dbd26452307405554687f54acc300ea87db0c9614075ee53159f766bdaf2327e
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4204	1424-76-0x0000000000400000-0x000000000042C000-memory.exe
4204	1424-76-0x0000000000400000-0x000000000042C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1424-76-0x0000000000400000-0x000000000042C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1424-76-0x0000000000400000-0x000000000042C000-memory.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4204-130-0x0000000001660000-0x00000000019AA000-memory.dmp

Download