Overview

overview

1

Static

static

79f756f2bc...82.exe

windows7-x64

1

79f756f2bc...82.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    37s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2022, 03:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    79f756f2bce1973cb2d4a679e9b1767833ef490f594b7cb52fc8a3978e641882.exe

  • Size

    56KB

  • MD5

    07333e293f8e8c90a67e75eaa3f89898

  • SHA1

    388b50975f4d39b39f16d2249b937f824dde6403

  • SHA256

    79f756f2bce1973cb2d4a679e9b1767833ef490f594b7cb52fc8a3978e641882

  • SHA512

    f7d7be0131c1e0b34a177ec4c84c3c9e8b1452198c47227c4fe313f8dbe325b547592c9f6f486420717a43b0b584d42b7a456b4364b14da4392f77d437a345f6

  • SSDEEP

    768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfwPLbtXxH0BjL5xqn2eenWYryUVe:kZ/nEkh8OTKNf/tGxL3q2etFx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:1340
      • C:\Users\Admin\AppData\Local\Temp\79f756f2bce1973cb2d4a679e9b1767833ef490f594b7cb52fc8a3978e641882.exe
        "C:\Users\Admin\AppData\Local\Temp\79f756f2bce1973cb2d4a679e9b1767833ef490f594b7cb52fc8a3978e641882.exe"
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:604

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/604-54-0x0000000000400000-0x0000000000409000-memory.dmp

            Filesize

            36KB

            Download

          • memory/604-55-0x0000000075F81000-0x0000000075F83000-memory.dmp

            Filesize

            8KB

            Download

          • memory/604-59-0x0000000010000000-0x0000000010013000-memory.dmp

            Filesize

            76KB

            Download

          • memory/604-60-0x0000000000400000-0x0000000000409000-memory.dmp

            Filesize

            36KB

            Download

          • memory/1340-56-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

            Filesize

            28KB

            Download