Overview

overview

4

Static

static

93540fa286...3a.exe

windows7-x64

4

93540fa286...3a.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    43s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06-11-2022 10:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    93540fa28601d935dfe4403dd03b31573c98a5502f9e6c9cabc791cdd689ef3a.exe

  • Size

    84KB

  • MD5

    1a40ae0ee0f1986a4cbdbb89bff38e42

  • SHA1

    12db7a16c56ad8266b8bbab6f5c694c0c64b4d6a

  • SHA256

    93540fa28601d935dfe4403dd03b31573c98a5502f9e6c9cabc791cdd689ef3a

  • SHA512

    6e1f1a651ccc456ee779e465fe06fb1010a13b92466ab24fe697f043d13e34b2c7b49e78d3067971aae17119b3a168a044ee45f73a9a6269e9139f2f4dc803e2

  • SSDEEP

    1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUCj:5m8nBjTmbxRBRN6WYiKqVo6ZCj

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:1224
      • C:\Users\Admin\AppData\Local\Temp\93540fa28601d935dfe4403dd03b31573c98a5502f9e6c9cabc791cdd689ef3a.exe
        "C:\Users\Admin\AppData\Local\Temp\93540fa28601d935dfe4403dd03b31573c98a5502f9e6c9cabc791cdd689ef3a.exe"
        2⤵
        • Drops file in Windows directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads