Analysis

  • max time kernel
    32s
  • max time network
    39s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-11-2022 15:26

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\1248-58-0x0000000000400000-0x000000000086E000-memory.exe command="C:\Users\Admin\AppData\Local\Temp\1248-58-0x0000000000400000-0x000000000086E000-memory.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: Invalid access to memory location.

General

  • Target

    1248-58-0x0000000000400000-0x000000000086E000-memory.exe

  • Size

    4.4MB

  • MD5

    b88ff72c9e8fd343c7ef7c759f13414e

  • SHA1

    5a49490a39b52b0759bbd58119acf12c737bb08a

  • SHA256

    e556d0a52510dc8af068de90401c02b2b4f6c5d36e40f91c21c6448de84b3b5e

  • SHA512

    56b838bbf4f77d3369772301806334859eed8e9a5c89c7d23fe0daa82e34ebaaeab732566982293a15f3cde614be7dc0e6854c64d580afcee04917dfe7792ef3

  • SSDEEP

    12288:HcF2cUoSSwu5To9EcwB/3ivlNEhYhBxqC3O:8cw1iTEh0B4C3O

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads