Analysis
-
max time kernel
106s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
25-07-2022 17:13
Static task
static1
Behavioral task
behavioral1
Sample
5509dab868388534ff1e34895a236315cd97ef84468aa5426b819f27e12227b3.exe
Resource
win7-20220715-en
windows7-x64
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
5509dab868388534ff1e34895a236315cd97ef84468aa5426b819f27e12227b3.exe
Resource
win10v2004-20220721-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5509dab868388534ff1e34895a236315cd97ef84468aa5426b819f27e12227b3.exe
-
Size
164KB
-
MD5
ec44428ef1679d93936ad77689750249
-
SHA1
b988a4c80a71ac969318c9e4bf77ff3a69961209
-
SHA256
5509dab868388534ff1e34895a236315cd97ef84468aa5426b819f27e12227b3
-
SHA512
ee86416a58d1f086fa5ca137791c395dd89638ebcd245604eb4ce11c8505713d5183020d43fd74f9cd17e228d4248e9d376472ebc48a63625c0e5c8b8c61b8f4
Score
8/10
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral2/memory/3076-133-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral2/memory/3076-134-0x0000000000400000-0x0000000000434000-memory.dmp upx behavioral2/memory/3076-135-0x0000000000400000-0x0000000000434000-memory.dmp upx behavioral2/memory/3076-136-0x0000000000400000-0x0000000000434000-memory.dmp upx behavioral2/memory/3076-137-0x0000000000400000-0x0000000000434000-memory.dmp upx behavioral2/memory/3076-138-0x0000000000400000-0x0000000000421000-memory.dmp upx -
Suspicious use of UnmapMainImage 1 IoCs
Processes:
5509dab868388534ff1e34895a236315cd97ef84468aa5426b819f27e12227b3.exepid process 3076 5509dab868388534ff1e34895a236315cd97ef84468aa5426b819f27e12227b3.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3076-130-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/3076-133-0x0000000000400000-0x0000000000421000-memory.dmpFilesize
132KB
-
memory/3076-134-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/3076-135-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/3076-136-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/3076-137-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/3076-138-0x0000000000400000-0x0000000000421000-memory.dmpFilesize
132KB