990bcaf138c29483b5573089b243cc6f4751ccd521148297130e3e36aa70e9f8 | Triage

Analysis

max time kernel
502s
max time network
486s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-09-2022 14:44

Sharing

Report Analysis Logs

General

Target

obj/Debug/CSharpRFIDDemo.exe
Size

40KB
MD5

17cd1c79a68f961c82c3a670f87aec62
SHA1

1c168e0036cd7517a74d04b9c246ab314098b69f
SHA256

739bd859be45e4e29c1b3c4f00ccd0f59b58fedb98c10f4825e47b849fd6d6e9
SHA512

fdd45cefc75a255ade4d3bc11a212930f02b010141d1c9bdf3a8fc954af04178f3dadbbe9d49034d750b063e86c4fba64374226cca9043bbc3d6a41bc5d9fca0
SSDEEP

768:IXmzojYOO7/sGmeOxfx9gXhSPX3bMK2jkUIA:IXmzoj7efoX3bTuVIA

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

CSharpRFIDDemo.exe

pid process

1560 CSharpRFIDDemo.exe

C:\Users\Admin\AppData\Local\Temp\obj\Debug\CSharpRFIDDemo.exe
"C:\Users\Admin\AppData\Local\Temp\obj\Debug\CSharpRFIDDemo.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1560-132-0x00000000752E0000-0x0000000075891000-memory.dmp

Filesize
5.7MB

Download
memory/1560-133-0x00000000752E0000-0x0000000075891000-memory.dmp

Filesize
5.7MB

Download