Analysis

  • max time kernel
    22s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    21/11/2022, 13:04

General

  • Target

    f27bde115a1b3cc2caf15a5653e5bd90eaa7b6412bde4a79c101d0d8e0ee08ef.exe

  • Size

    222KB

  • MD5

    2361710509ebc041da5a8fc2a654ac54

  • SHA1

    a606d2850bcd3e040dc7a2b30f3fca55dea764a7

  • SHA256

    f27bde115a1b3cc2caf15a5653e5bd90eaa7b6412bde4a79c101d0d8e0ee08ef

  • SHA512

    49558b78ea8799ceb020056d9a527a485247ae11eb8d1bb7321ab7024c5802144b464a23e8a1aa22b5cdc92d67c6ca36f5eafc35bda65a5a7a6409df0e3499d6

  • SSDEEP

    6144:7g0R7n4Tp1FYi9RAftOW6U79QZlBfEEgo:Bn+XVrxVY98BfEEX

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f27bde115a1b3cc2caf15a5653e5bd90eaa7b6412bde4a79c101d0d8e0ee08ef.exe
    "C:\Users\Admin\AppData\Local\Temp\f27bde115a1b3cc2caf15a5653e5bd90eaa7b6412bde4a79c101d0d8e0ee08ef.exe"
    1⤵
    • Drops file in System32 directory
    PID:328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/328-54-0x0000000074ED1000-0x0000000074ED3000-memory.dmp

    Filesize

    8KB

  • memory/328-55-0x0000000000310000-0x000000000037D000-memory.dmp

    Filesize

    436KB

  • memory/328-56-0x0000000000380000-0x00000000003E7000-memory.dmp

    Filesize

    412KB