d148803569f98a5ca1d00a15ec120e5fae409d0a47b301b67b4cc5772098cd8f | Triage

Analysis

max time kernel
61s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 11:31

Sharing

Report Analysis Logs

General

Target

1228-63-0x0000000000400000-0x000000000042F000-memory.exe
Size

188KB
MD5

3443251bf0ca4a82311c9b7059213fc5
SHA1

501b7400fe4e103fb94dcbde07a0736feeb4bd45
SHA256

d148803569f98a5ca1d00a15ec120e5fae409d0a47b301b67b4cc5772098cd8f
SHA512

2720c87243cf4987cd9baa49637911e30b46be82c280cca8141295f0d852fbdc77d3324f5bb17d71762278d8199d1a3c4559d2aa63c8e537e20ee1445ec14670

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

1228-63-0x0000000000400000-0x000000000042F000-memory.exe

pid process

4712 1228-63-0x0000000000400000-0x000000000042F000-memory.exe
4712 1228-63-0x0000000000400000-0x000000000042F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1228-63-0x0000000000400000-0x000000000042F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1228-63-0x0000000000400000-0x000000000042F000-memory.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4712-130-0x0000000001740000-0x0000000001A8A000-memory.dmp

Filesize
3.3MB

Download