Analysis
-
max time kernel
39s -
max time network
97s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
14/10/2022, 09:37
General
-
Target
76c2ef084fa1a15ad4eb3785bd8a4c9251bc1bc15b905ffe55e6fe4bdafbe5d1.exe
-
Size
77KB
-
MD5
6d6723106cfa4879443f5a1f88f89ca0
-
SHA1
4fd9fbe0fb17fafbf944025be5d8edc82a26dd53
-
SHA256
76c2ef084fa1a15ad4eb3785bd8a4c9251bc1bc15b905ffe55e6fe4bdafbe5d1
-
SHA512
998fdae10795e5f28491a30d4db9bc76f0f77cfcf5e8995cc28b9e2674018eefba9717401a18ab020a417e77894818ca3d300d978eebd5a53a9cc5a8108a4cbc
-
SSDEEP
1536:TO+AZhCZFcsifjE0SJIB/6pCypfoe6WH/RgtEE:TO3ZhHsio0tBGCzoRIEE
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\76c2ef084fa1a15ad4eb3785bd8a4c9251bc1bc15b905ffe55e6fe4bdafbe5d1.exe"C:\Users\Admin\AppData\Local\Temp\76c2ef084fa1a15ad4eb3785bd8a4c9251bc1bc15b905ffe55e6fe4bdafbe5d1.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵