Analysis
-
max time kernel
32s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
29-10-2022 23:29
General
-
Target
86be4f37b75bf470c815096338f3e6bb1ac357b61ebf815e16efb7ac4bd01525.exe
-
Size
77KB
-
MD5
a3909c0a1de9274e8a4021397f5aacf0
-
SHA1
20c4bb7c4559f1f0b8b421846788fb7045adeb06
-
SHA256
86be4f37b75bf470c815096338f3e6bb1ac357b61ebf815e16efb7ac4bd01525
-
SHA512
55575a6005fca4078e4d0f1005aa93f25c6f8ae9297c84cb9f2422ef9899f5070eec9101004316752a0d92f6f76d7cf5823593cf1775ad3c23762b0c2d20bfe6
-
SSDEEP
1536:TO+AZhCZFcsifjE0SJIB/6pCypfoe6WH/RgfT:TO3ZhHsio0tBGCzoReT
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\86be4f37b75bf470c815096338f3e6bb1ac357b61ebf815e16efb7ac4bd01525.exe"C:\Users\Admin\AppData\Local\Temp\86be4f37b75bf470c815096338f3e6bb1ac357b61ebf815e16efb7ac4bd01525.exe"2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-