Overview

overview

1

Static

static

e80b80da30...91.exe

windows7-x64

1

e80b80da30...91.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    91s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 01:10 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e80b80da30742b7679ce76ad19143950dba91dcc0f7ede773362a3c792dfee91.exe

  • Size

    31KB

  • MD5

    a0f60c991f286a78bb2af2a4c8d4ebef

  • SHA1

    4c873767c3d218f5c339e1254c0259d49b6691f4

  • SHA256

    e80b80da30742b7679ce76ad19143950dba91dcc0f7ede773362a3c792dfee91

  • SHA512

    a214fe21ccc476106334adbcb754aa4b65d64dac29b30fb7da6cc8160217581b53e4cbd7388ef6f8fb68ade8649da086c2184f920ca9459b5b743befc3a64280

  • SSDEEP

    768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfp:kZ/nEkh8OTKNY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3056
      • C:\Users\Admin\AppData\Local\Temp\e80b80da30742b7679ce76ad19143950dba91dcc0f7ede773362a3c792dfee91.exe
        "C:\Users\Admin\AppData\Local\Temp\e80b80da30742b7679ce76ad19143950dba91dcc0f7ede773362a3c792dfee91.exe"
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4368

    Network

      No results found
    • 67.26.109.254:80
      46 B
       40 B
       1
      1
    • 20.189.173.12:443
      322 B
       7
    No results found

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3056-133-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

      Filesize

      28KB

      Download

    • memory/4368-132-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

      Download

    • memory/4368-134-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

      Download

    • memory/4368-135-0x0000000010000000-0x0000000010013000-memory.dmp

      Filesize

      76KB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.