1bb464a1e9c884782acda25e6bae7aeb8c000d1180108fbe088058bbc01eb1a7 | Triage

Analysis

max time kernel
123s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
06-08-2022 00:20

Sharing

Report Analysis Logs

General

Target

1288-67-0x0000000000400000-0x000000000042F000-memory.exe
Size

188KB
MD5

027151c8adc79b647f47952b8be3bce4
SHA1

90dcd759b82edc13ca46180d571051fc5544cea1
SHA256

1bb464a1e9c884782acda25e6bae7aeb8c000d1180108fbe088058bbc01eb1a7
SHA512

a5443b2a816499ed6dfa39b6cac65982b28862e42ae8b87288b245cd463cd6ba7fa8e2eca93c0cca72c002e7ef09967755af7fea6d2190c2e5f0a88a169f98ba

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

1288-67-0x0000000000400000-0x000000000042F000-memory.exe

pid process

4972 1288-67-0x0000000000400000-0x000000000042F000-memory.exe
4972 1288-67-0x0000000000400000-0x000000000042F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1288-67-0x0000000000400000-0x000000000042F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1288-67-0x0000000000400000-0x000000000042F000-memory.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4972-132-0x0000000000DA0000-0x00000000010EA000-memory.dmp

Filesize
3.3MB

Download