Analysis

  • max time kernel
    29s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-10-2022 13:43

General

  • Target

    Specification.exe

  • Size

    953KB

  • MD5

    f27c978a656a30a737e26e2a858baf61

  • SHA1

    244afc69f47b22f25ce43215722d6b6e7a768ef6

  • SHA256

    9d3daf108dbb469968ba5f3bacd9a629c274f00d74eba9569d59609242700349

  • SHA512

    1fd25b98a824a99e657f1eeb6f71ce9a2d7bd93d934789f33c4e73178e83f9e8cae8d4b9ce69a5fb16834c9b0ff1f517c2cfad27a17152e01ce083b916d88015

  • SSDEEP

    12288:VNqZPTGiW79uxAlSKncvLjsBnZmV22PjbqCU8nM2oExb5poeEDQD5VYGEM7hTLk:VOPlAvEaMLjsb6BqCU8yER

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Specification.exe
    "C:\Users\Admin\AppData\Local\Temp\Specification.exe"
    1⤵
      PID:3232
    • C:\Windows\System32\svchost.exe
      C:\Windows\System32\svchost.exe -k netsvcs -p
      1⤵
        PID:5020

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3232-132-0x0000000000AE0000-0x0000000000BD4000-memory.dmp

        Filesize

        976KB

      • memory/3232-133-0x0000000005BE0000-0x0000000006184000-memory.dmp

        Filesize

        5.6MB

      • memory/3232-134-0x0000000005570000-0x0000000005602000-memory.dmp

        Filesize

        584KB

      • memory/3232-135-0x00000000056D0000-0x000000000576C000-memory.dmp

        Filesize

        624KB

      • memory/3232-136-0x0000000005560000-0x000000000556A000-memory.dmp

        Filesize

        40KB