Analysis
-
max time kernel
45s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
20/10/2022, 00:34
General
-
Target
1ba9d8cf2c14d646aa04294b4e154a4dea1bbf39ba7aa9a06308c7cd2310e7a9.exe
-
Size
77KB
-
MD5
a25860dcfbecf6dc01715eba946edfb0
-
SHA1
fa7cc948c6850d755d28605893932a5add44f465
-
SHA256
1ba9d8cf2c14d646aa04294b4e154a4dea1bbf39ba7aa9a06308c7cd2310e7a9
-
SHA512
6edaf3b1cc73166a6084543ec76da464fbde708cf14a6f875956c35a5037027e72ad8fc11605aa7b0544adcb814b67a7d9affbe3d828b2fcacc65350eb46e038
-
SSDEEP
1536:TO+AZhCZFcsifjE0SJIB/6pCypfoe6WH/RgR:TO3ZhHsio0tBGCzoRi
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\1ba9d8cf2c14d646aa04294b4e154a4dea1bbf39ba7aa9a06308c7cd2310e7a9.exe"C:\Users\Admin\AppData\Local\Temp\1ba9d8cf2c14d646aa04294b4e154a4dea1bbf39ba7aa9a06308c7cd2310e7a9.exe"2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-