5652aebb589e3843f15c258eb512c144c940ea1f3baeca763193c9e03bbf6079 | Triage

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 04:09

Sharing

Report Analysis Logs

General

Target

5652aebb589e3843f15c258eb512c144c940ea1f3baeca763193c9e03bbf6079.exe
Size

309KB
MD5

93b1761339f66f060c201b7e77c8ad91
SHA1

c048ce5f34658745a75da99079d561293d24f9a3
SHA256

5652aebb589e3843f15c258eb512c144c940ea1f3baeca763193c9e03bbf6079
SHA512

397406deaaec0fc9effa98e1d26c4f80f54e02d688bc8373b89a8fcb4b0540375f3f763295cb23ac370f6d4cfba44ad95bbba7073217cbb2f64f42300caf6d32

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

Processes:

5652aebb589e3843f15c258eb512c144c940ea1f3baeca763193c9e03bbf6079.exe

description ioc process

File created C:\Windows\Tasks\EnergySaver.job 5652aebb589e3843f15c258eb512c144c940ea1f3baeca763193c9e03bbf6079.exe

C:\Users\Admin\AppData\Local\Temp\5652aebb589e3843f15c258eb512c144c940ea1f3baeca763193c9e03bbf6079.exe
"C:\Users\Admin\AppData\Local\Temp\5652aebb589e3843f15c258eb512c144c940ea1f3baeca763193c9e03bbf6079.exe"
1⤵
- Drops file in Windows directory
PID:1332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1332-130-0x0000000000100000-0x0000000000133000-memory.dmp

Filesize
204KB

Download
memory/1332-131-0x0000000000930000-0x000000000095F000-memory.dmp

Filesize
188KB

Download
memory/1332-135-0x0000000000100000-0x0000000000133000-memory.dmp

Filesize
204KB

Download