990bcaf138c29483b5573089b243cc6f4751ccd521148297130e3e36aa70e9f8 | Triage

Analysis

max time kernel
495s
max time network
421s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30-09-2022 14:44

Sharing

Report Analysis Logs

General

Target

bin/CSharpRFIDDemo.exe
Size

40KB
MD5

17cd1c79a68f961c82c3a670f87aec62
SHA1

1c168e0036cd7517a74d04b9c246ab314098b69f
SHA256

739bd859be45e4e29c1b3c4f00ccd0f59b58fedb98c10f4825e47b849fd6d6e9
SHA512

fdd45cefc75a255ade4d3bc11a212930f02b010141d1c9bdf3a8fc954af04178f3dadbbe9d49034d750b063e86c4fba64374226cca9043bbc3d6a41bc5d9fca0
SSDEEP

768:IXmzojYOO7/sGmeOxfx9gXhSPX3bMK2jkUIA:IXmzoj7efoX3bTuVIA

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

CSharpRFIDDemo.exe

pid process

1048 CSharpRFIDDemo.exe

C:\Users\Admin\AppData\Local\Temp\bin\CSharpRFIDDemo.exe
"C:\Users\Admin\AppData\Local\Temp\bin\CSharpRFIDDemo.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1048

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-54-0x00000000759F1000-0x00000000759F3000-memory.dmp

Filesize
8KB

Download
memory/1048-55-0x0000000074A00000-0x0000000074FAB000-memory.dmp

Filesize
5.7MB

Download
memory/1048-56-0x0000000000D35000-0x0000000000D46000-memory.dmp

Filesize
68KB

Download
memory/1048-57-0x0000000074A00000-0x0000000074FAB000-memory.dmp

Filesize
5.7MB

Download