Analysis

  • max time kernel
    150s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    20-11-2022 08:47

General

  • Target

    535135ea88f5d21e27cdaee9382f04897d239b7004527e75311df09f6966beb3.exe

  • Size

    200KB

  • MD5

    01d1d520eabb97e370715908c5ee64eb

  • SHA1

    5a75ababf5b61242ee14c65e3613884d14e88ab7

  • SHA256

    535135ea88f5d21e27cdaee9382f04897d239b7004527e75311df09f6966beb3

  • SHA512

    7198ad337e9c21e8667f48126581bf8c896f7148ab45298f84b3eb0bc4a899b777ec3d9a3b7ab192545b7282fc548636050c6d8a8891a4f97e6c24cd615e1894

  • SSDEEP

    6144:tUkQRtq4yN9QVB6QMwthXi0130Xlavfyj:Wv3hJ3f30VEfo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\535135ea88f5d21e27cdaee9382f04897d239b7004527e75311df09f6966beb3.exe
    "C:\Users\Admin\AppData\Local\Temp\535135ea88f5d21e27cdaee9382f04897d239b7004527e75311df09f6966beb3.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: RenamesItself
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1368-54-0x0000000076071000-0x0000000076073000-memory.dmp
    Filesize

    8KB