Overview

overview

1

Static

static

adbe954801...3f.exe

windows7-x64

1

adbe954801...3f.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    152s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 06:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    adbe9548019b70c5278ce9dde2583d67769ef6d981af993db280ef4781726a3f.exe

  • Size

    133KB

  • MD5

    6c7c67f811baedcc45dfda8392938c80

  • SHA1

    3c77305836990193ac2ca9c9cf9e45ae45b41f8f

  • SHA256

    adbe9548019b70c5278ce9dde2583d67769ef6d981af993db280ef4781726a3f

  • SHA512

    05402d2cdcf9a276410b4c7be5c846b1ffd02dfa8d1fefe14cad789363e9c3568b9ff881513618915aa8be4ed63d1e26bd674a46e2f05ef177537285dfaec081

  • SSDEEP

    3072:Hz2bXsd0yHQaYTnNKaE0Afp4j81yMCfR:Hzmsd0yjYT4fd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\adbe9548019b70c5278ce9dde2583d67769ef6d981af993db280ef4781726a3f.exe
    "C:\Users\Admin\AppData\Local\Temp\adbe9548019b70c5278ce9dde2583d67769ef6d981af993db280ef4781726a3f.exe"
    1⤵
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of WriteProcessMemory
    PID:4540
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:1600

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1600-135-0x0000000000120000-0x000000000012E000-memory.dmp

            Filesize

            56KB

            Download

          • memory/1600-136-0x00000000001D0000-0x00000000001E1000-memory.dmp

            Filesize

            68KB

            Download

          • memory/1600-137-0x0000000000950000-0x00000000009D0000-memory.dmp

            Filesize

            512KB

            Download

          • memory/4540-133-0x0000000000400000-0x0000000000413000-memory.dmp

            Filesize

            76KB

            Download

          • memory/4540-134-0x0000000000520000-0x0000000000533000-memory.dmp

            Filesize

            76KB

            Download