Analysis
-
max time kernel
151s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
15-07-2022 03:10
General
-
Target
adcbede09da13c2aa1e14aa9bb91817c.exe
-
Size
310KB
-
MD5
adcbede09da13c2aa1e14aa9bb91817c
-
SHA1
63645ff0957d234eaec0141922208c70181cd70a
-
SHA256
31a8918d1ea465e8130afd39e4ff6335692756ffde95a840aff0bc0a7565cdf2
-
SHA512
929d124db01e627293248ffa4c242c9e4c769242e1db4ff76b422b23cee7d5dafc9dceb77c63338884967a4fbdcb986d93a9444da3b96b6b87953aa9f8422402
Score
1/10
Malware Config
Signatures
-
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\adcbede09da13c2aa1e14aa9bb91817c.exe"C:\Users\Admin\AppData\Local\Temp\adcbede09da13c2aa1e14aa9bb91817c.exe"1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/756-54-0x00000000755B1000-0x00000000755B3000-memory.dmpFilesize
8KB
-
memory/756-56-0x00000000001B0000-0x00000000001B9000-memory.dmpFilesize
36KB
-
memory/756-55-0x00000000002ED000-0x00000000002FE000-memory.dmpFilesize
68KB
-
memory/756-57-0x0000000000400000-0x0000000000A19000-memory.dmpFilesize
6.1MB
-
memory/756-58-0x0000000000400000-0x0000000000A19000-memory.dmpFilesize
6.1MB