Analysis

  • max time kernel
    29s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:45

General

  • Target

    34166e030ae1e3ef6c3ad2ac1c9ce7a6d49fad53b19c4eb06d2c034f53f03803.exe

  • Size

    354KB

  • MD5

    2e1c13378caecbf972663c99b13aef60

  • SHA1

    8f531e44784d3e31841d9c1583fdc05f580d2695

  • SHA256

    34166e030ae1e3ef6c3ad2ac1c9ce7a6d49fad53b19c4eb06d2c034f53f03803

  • SHA512

    1ee4c35bf44608021db7ac45ea671e66389f4e191c2884218b3620244546a24f99583e5c4d2710b23fe96e526ec781ef773c86696f1e1fca5de3b1cd5a682b95

  • SSDEEP

    6144:4tKn+J6Helr0DXe2VaXr5pykoyn25pW6bacHO4lJ3B:416HelreLaXdpyocplWcHllJR

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\34166e030ae1e3ef6c3ad2ac1c9ce7a6d49fad53b19c4eb06d2c034f53f03803.exe
    "C:\Users\Admin\AppData\Local\Temp\34166e030ae1e3ef6c3ad2ac1c9ce7a6d49fad53b19c4eb06d2c034f53f03803.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1688-54-0x00000000765A1000-0x00000000765A3000-memory.dmp

    Filesize

    8KB

  • memory/1688-55-0x0000000000280000-0x00000000002C4000-memory.dmp

    Filesize

    272KB

  • memory/1688-56-0x0000000000370000-0x00000000003BF000-memory.dmp

    Filesize

    316KB

  • memory/1688-57-0x0000000000400000-0x0000000000444000-memory.dmp

    Filesize

    272KB