6d585ca9b0e2a491b53da4f83319544b95c858f07f906b108e2147e9ac55ed48 | Triage™

Analysis

max time kernel
133s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
13/08/2022, 08:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
spool.exe
Size 10.6MB
Sample220813-kxp95aaec5
SHA256 6d585ca9b0e2a491b53da4f83319544b95c858f07f906b108e2147e9ac55ed48
MD5 4eb5eb52061cc8cf06e28e7eb20cd055
SHA1 5978475edbbe43d3b97821ecb866adbba071d17c
SHA512 344ac2de8dd8af4451580620d4288450f1b05a210b046e5ad886efe1bda0973d459d2ac1caa3a2335f6e605cf876c8ae8e2070e68ee987e8292aaa0691427314
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3168	spool.exe
3168	spool.exe
3168	spool.exe
3168	spool.exe

C:\Users\Admin\AppData\Local\Temp\spool.exe
"C:\Users\Admin\AppData\Local\Temp\spool.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads