Analysis

  • max time kernel
    92s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 19:30

General

  • Target

    95f0ae26f52f1d3c06e3268d281b3bc3fc3a3323290fb13c81e5badf82e50c0c.exe

  • Size

    31KB

  • MD5

    82d44f9bd8bdbfa2157996d6fe6b53f7

  • SHA1

    a9678a4818bce148cba178b72a55e25b51c7610c

  • SHA256

    95f0ae26f52f1d3c06e3268d281b3bc3fc3a3323290fb13c81e5badf82e50c0c

  • SHA512

    9bf094118aa61a187f23b651abc95beb5fcdf3a0ae696a30ff4ca9e56ae3227ed70e5371ce6b0180dcb5b05e7d69347440bf981d93990eab87be811078f59764

  • SSDEEP

    768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfl:kZ/nEkh8OTKNk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3044
      • C:\Users\Admin\AppData\Local\Temp\95f0ae26f52f1d3c06e3268d281b3bc3fc3a3323290fb13c81e5badf82e50c0c.exe
        "C:\Users\Admin\AppData\Local\Temp\95f0ae26f52f1d3c06e3268d281b3bc3fc3a3323290fb13c81e5badf82e50c0c.exe"
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2512

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2512-132-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

    • memory/2512-133-0x0000000010000000-0x0000000010013000-memory.dmp

      Filesize

      76KB

    • memory/2512-135-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

    • memory/2512-136-0x0000000010000000-0x0000000010013000-memory.dmp

      Filesize

      76KB

    • memory/3044-134-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

      Filesize

      28KB