Analysis

  • max time kernel
    42s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2022, 16:06

General

  • Target

    721b9e7f5b449d42d813686f19cb33799588a101da1c668ebe18ae9d844f4ef5.exe

  • Size

    28KB

  • MD5

    094edbaad6251dcff5a04ffabd593f70

  • SHA1

    8778de7f63de0e469edbb5c43b1f3598b9c714eb

  • SHA256

    721b9e7f5b449d42d813686f19cb33799588a101da1c668ebe18ae9d844f4ef5

  • SHA512

    b41896e3057cdb41d4b2782a38cc167604ea849b0d36ec0da42b1014a81ea995ee7a42b90107543855e2c41cfcdffb1e3b1477d626e2bc8de1adbd2590948b71

  • SSDEEP

    384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1A:hUjKVjl9xw3x6nz7vj1wr2J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:1268
      • C:\Users\Admin\AppData\Local\Temp\721b9e7f5b449d42d813686f19cb33799588a101da1c668ebe18ae9d844f4ef5.exe
        "C:\Users\Admin\AppData\Local\Temp\721b9e7f5b449d42d813686f19cb33799588a101da1c668ebe18ae9d844f4ef5.exe"
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1960

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1268-57-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

            Filesize

            24KB

          • memory/1960-54-0x0000000074AB1000-0x0000000074AB3000-memory.dmp

            Filesize

            8KB

          • memory/1960-55-0x0000000000400000-0x0000000000409000-memory.dmp

            Filesize

            36KB

          • memory/1960-56-0x0000000010000000-0x0000000010011000-memory.dmp

            Filesize

            68KB