Analysis

  • max time kernel
    45s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2022, 05:33

General

  • Target

    b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f.exe

  • Size

    329KB

  • MD5

    692f9f5b71c33df42692341c8384ab80

  • SHA1

    67f8a0c26a7665c1f79c2109c06865240d3e2938

  • SHA256

    b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f

  • SHA512

    bd0a39e66f5d07a03289c02b67369f7e71b21f40de88c3631bd7cb6f5a2f539d840aeebb6b7a31c7bce264b0fdec34e6ef72dae34456ddd33f0780fe7d71b0a3

  • SSDEEP

    6144:26hrCeeeeeeleeeeeeeeeeeee6eeeeeeeeeeeeeeeeeee2eeebeeeeeeeeeeeeeV:2Crk+GVhQxBgq7GPjTFWNA

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f.exe
    "C:\Users\Admin\AppData\Local\Temp\b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:1292

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1292-54-0x00000000762E1000-0x00000000762E3000-memory.dmp

          Filesize

          8KB

        • memory/1292-55-0x0000000000400000-0x000000000043A000-memory.dmp

          Filesize

          232KB

        • memory/1292-56-0x0000000000270000-0x00000000002AA000-memory.dmp

          Filesize

          232KB

        • memory/1292-57-0x0000000000340000-0x0000000000395000-memory.dmp

          Filesize

          340KB

        • memory/1292-58-0x0000000000400000-0x000000000043A000-memory.dmp

          Filesize

          232KB