6d585ca9b0e2a491b53da4f83319544b95c858f07f906b108e2147e9ac55ed48 | Triage

Analysis

max time kernel
85s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 06:35

Sharing

Report Analysis Logs

General

Target

update.exe
Size

10.6MB
MD5

4eb5eb52061cc8cf06e28e7eb20cd055
SHA1

5978475edbbe43d3b97821ecb866adbba071d17c
SHA256

6d585ca9b0e2a491b53da4f83319544b95c858f07f906b108e2147e9ac55ed48
SHA512

344ac2de8dd8af4451580620d4288450f1b05a210b046e5ad886efe1bda0973d459d2ac1caa3a2335f6e605cf876c8ae8e2070e68ee987e8292aaa0691427314
SSDEEP

98304:yTQK17uisWQXoE9h673L5c6wFTEXFFuYWCBuO/11N2:yTQGNd24ZX3o4tH2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

update.exe

pid process

868 update.exe
868 update.exe
868 update.exe
868 update.exe

C:\Users\Admin\AppData\Local\Temp\update.exe
"C:\Users\Admin\AppData\Local\Temp\update.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads