Overview

overview

1

Static

static

8664aff4fd...9a.exe

windows7-x64

1

8664aff4fd...9a.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    111s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 18:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8664aff4fdb4bfa6a8cba572d3713b3954f05cdb5cab54a6b63bb419dd09879a.exe

  • Size

    114KB

  • MD5

    772ced5642e2b05b0f6889ddad2dfd55

  • SHA1

    f58fef68b93bec1078f0cc1a2fe3331519516717

  • SHA256

    8664aff4fdb4bfa6a8cba572d3713b3954f05cdb5cab54a6b63bb419dd09879a

  • SHA512

    2573a330e71e3cce7e0aabfc70ea7df477eea391cb0e937e9669dc820474ec088ad6974621269000c066b336044bc37d673dafee21b7c3404b2c790d77f275ba

  • SSDEEP

    3072:+29R/LO5kWuRH+rNcbLHG2li7LsADaYQ1D:BBObCHUcbJi7L7GYI

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8664aff4fdb4bfa6a8cba572d3713b3954f05cdb5cab54a6b63bb419dd09879a.exe
    "C:\Users\Admin\AppData\Local\Temp\8664aff4fdb4bfa6a8cba572d3713b3954f05cdb5cab54a6b63bb419dd09879a.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    • Suspicious use of WriteProcessMemory
    PID:612
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:4980

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/612-133-0x0000000000400000-0x0000000000414000-memory.dmp

      Filesize

      80KB

      Download