Overview

overview

3

Static

static

ef55a4c5d9...5d.exe

windows7-x64

3

ef55a4c5d9...5d.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    112s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2022, 19:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    ef55a4c5d92c01457d6acf3e01669407d8a6fae286bec44197062f5dc87b225d.exe

  • Size

    41KB

  • MD5

    53626583697c7b46ae5c9c2acc81d1d7

  • SHA1

    78c57b695c11007bd602cb6c8d67dd35a12002ff

  • SHA256

    ef55a4c5d92c01457d6acf3e01669407d8a6fae286bec44197062f5dc87b225d

  • SHA512

    842e8e82bb6c01c8cceac5163fc375d756ef273d084b7a654b3a2fe1ca08e4f57d7d42d25f6610998ae5157bfb9157ce915f1663b40dd315423601976d76b351

  • SSDEEP

    768:UVGgj4ypo2tjyQ+7Six0PHyaxh7b079O6ZINVi6eficgmpMel:UVx4yLtb+7SiGyavwY2IzzexgM5

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3000
      • C:\Users\Admin\AppData\Local\Temp\ef55a4c5d92c01457d6acf3e01669407d8a6fae286bec44197062f5dc87b225d.exe
        "C:\Users\Admin\AppData\Local\Temp\ef55a4c5d92c01457d6acf3e01669407d8a6fae286bec44197062f5dc87b225d.exe"
        2⤵
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4204

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4204-132-0x0000000000400000-0x000000000040C000-memory.dmp

            Filesize

            48KB

            Download

          • memory/4204-133-0x0000000000400000-0x000000000040C000-memory.dmp

            Filesize

            48KB

            Download