5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59 | Triage

Analysis

max time kernel
142s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 15:35

Sharing

Report Analysis Logs

General

Target

5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59.exe
Size

801KB
MD5

f31f4aed4714aa00ba6a05b8bded18cf
SHA1

d620c12de8a1fc8f2a3b19ff1a12e96d322b40d2
SHA256

5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59
SHA512

99d1aa480f593a9f7e869ee2752cc1fc873c970246f8088085b15ad99a4d69b2fbb5f751e31288f65e6f92ef5fdd45a5fe0ec6ff0b1ded149a2cb3da716d8253

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59.exe

pid	process
4432	5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59.exe
4432	5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59.exe

C:\Users\Admin\AppData\Local\Temp\5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59.exe
"C:\Users\Admin\AppData\Local\Temp\5597389d0dc266ca7b7b9b0e904f2bb379a2df92660e27a29a0e3950ca243f59.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4432-132-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download