Analysis

  • max time kernel
    42s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    06-07-2022 16:12

General

  • Target

    1028-60-0x0000000000400000-0x000000000042C000-memory.exe

  • Size

    176KB

  • MD5

    e1b2198d98775faf7cedc23ddfa7ce77

  • SHA1

    5bfb2d89fb48590c1674a22f4f65c8bd6b0060d9

  • SHA256

    43c64befdfa70b2aeb1d2bc4ea9023f5e031b9bf7a02b2bad98392eec956e131

  • SHA512

    11decb632de0482fe9d293958b15d9be426e92f6f6f7e45da7b36e940a6730058d55a027b6ac161135c1079b9e0468311fb73d596c1db0a4aed7389cd1884d3f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1028-60-0x0000000000400000-0x000000000042C000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1028-60-0x0000000000400000-0x000000000042C000-memory.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1516-54-0x0000000000920000-0x0000000000C23000-memory.dmp
    Filesize

    3.0MB