513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782 | Triage

Analysis

max time kernel
143s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
resource tags

arch:x64arch:x86image:win10v2004-20220414-enlocale:en-usos:windows10-2004-x64system
submitted
18-07-2022 17:12

Sharing

Report Analysis Logs

General

Target

513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782.exe
Size

700KB
MD5

f232c87333431bec63229955ecfcd1aa
SHA1

51b4e002936e72a2295f24d3a767a6a7985ca030
SHA256

513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782
SHA512

24bd47ee1c19ec7fe1dd95c994315dcd9d2edf46481dd23fe2c2a1ec3359c1dbc711bd592983d105e5b01f9eb84f204d59d49a3202593008f3fb18b551a4e4bb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782.exe

pid	process
4744	513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782.exe
4744	513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782.exe

C:\Users\Admin\AppData\Local\Temp\513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782.exe
"C:\Users\Admin\AppData\Local\Temp\513115c477b2b6879cdb98779e501329422b8bd759ce1c4b0f844f6b2cd82782.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4744-130-0x0000000002260000-0x0000000002266000-memory.dmp

Filesize
24KB

Download