Analysis

  • max time kernel
    144s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2022, 07:53

General

  • Target

    9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe

  • Size

    315KB

  • MD5

    62ee3640df0590eea152f375e19a5870

  • SHA1

    f0c095cb8ce96b3c1fe88f949816953be533775a

  • SHA256

    9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330

  • SHA512

    2c2e0d37edc67a167aafe8ed044f5ccd62fb12988e6f0a3f2540aaeba71eb1da4cc672ca382a66ed3f0a4d25c82e0c30edbba677d51faf410ff9504a169d43f4

  • SSDEEP

    6144:WXDXL0BvnjbJDB7VHMkzQB9qnxcoGEVoUolK:Qb0BPjb37ykeuxcoJi9K

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe
    "C:\Users\Admin\AppData\Local\Temp\9b6e9951fc5e0aad67e35dc951079c91c7df87bbc0e81029f85ce9dc0f057330.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2016-54-0x00000000761F1000-0x00000000761F3000-memory.dmp

    Filesize

    8KB

  • memory/2016-55-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB

  • memory/2016-56-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB