babb1f48b15e8b7d209f8b8862c881ca7572ff50d590b031cc6249834e099425 | Triage™

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
16/06/2022, 09:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4944-133-0x0000000000400000-0x000000000042E000-memory.exe
Size 184KB
Sample220616-ln231adccm
SHA256 babb1f48b15e8b7d209f8b8862c881ca7572ff50d590b031cc6249834e099425
MD5 5f2e82317513c1dd8767cae5f0334456
SHA1 843ac938ddab331b221d99de6940c732d5b1bcf0
SHA512 e928bd2e0270b1ce5d5ca53a5d563178be86d967316f1164326073547d683d24d02c9eec8e838ecc6c62c277638d1797fa6cf633115ca24e92e81e54b9a30706
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1504	4944-133-0x0000000000400000-0x000000000042E000-memory.exe
1504	4944-133-0x0000000000400000-0x000000000042E000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4944-133-0x0000000000400000-0x000000000042E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4944-133-0x0000000000400000-0x000000000042E000-memory.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-130-0x0000000000EA0000-0x00000000011EA000-memory.dmp

Download