664b0f30a8715d05ce6428fa8a4121a3c9259783705e6841e61eb0c2d48d4bc3 | Triage™

Analysis

max time kernel
118s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
27/06/2022, 13:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2040-63-0x0000000000400000-0x000000000042F000-memory.exe
Size 188KB
Sample220627-qqd66sbdcj
SHA256 664b0f30a8715d05ce6428fa8a4121a3c9259783705e6841e61eb0c2d48d4bc3
MD5 eb68eba425300637c0f194d0b61d0918
SHA1 80dad33262fb74074f182157f5b8afde3a802ace
SHA512 4d6435e127c39860347c32f85f47a8292960d62eccc4c113d96461e176dbfa56ff4740c412375bad36cacb9f91f4ea367f2e363bed2a11faeb326e05b0ad657c
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1800	2040-63-0x0000000000400000-0x000000000042F000-memory.exe
1800	2040-63-0x0000000000400000-0x000000000042F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2040-63-0x0000000000400000-0x000000000042F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2040-63-0x0000000000400000-0x000000000042F000-memory.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1800-130-0x0000000000E90000-0x00000000011DA000-memory.dmp

Download