Analysis

  • max time kernel
    125s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 11:19

General

  • Target

    b775a8f7629966592cc7727e2081924a7d7cf83edd7447aa60627a2b67d87c94.exe

  • Size

    595KB

  • MD5

    fc4106f71cdcdf6d6fab5441a6c6d7fb

  • SHA1

    8b220f2cd498006eb986822821c404bc82b0f77a

  • SHA256

    b775a8f7629966592cc7727e2081924a7d7cf83edd7447aa60627a2b67d87c94

  • SHA512

    5761318832149bb541e20e64494b3f06d07d086832d9e4dc6a0f9c0efed25eb1844ab72f7c1a8bb124cb8376f1438409ad0e3ded6c46b52b25918a1e251e7e19

  • SSDEEP

    12288:Dp1GhehGVknF0ahka8RFUHAMh635Ogtwq671S9D5xOkc0/GnFf+upkbEBTLnUZ5a:ltjF084lgmV671S9FxVV/GnFflTLUra

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b775a8f7629966592cc7727e2081924a7d7cf83edd7447aa60627a2b67d87c94.exe
    "C:\Users\Admin\AppData\Local\Temp\b775a8f7629966592cc7727e2081924a7d7cf83edd7447aa60627a2b67d87c94.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1608-54-0x000000013F410000-0x000000013F4AA000-memory.dmp
    Filesize

    616KB

  • memory/1608-55-0x00000000023E0000-0x00000000024DE000-memory.dmp
    Filesize

    1016KB

  • memory/1608-56-0x0000000002640000-0x0000000002760000-memory.dmp
    Filesize

    1.1MB

  • memory/1608-66-0x0000000002640000-0x0000000002760000-memory.dmp
    Filesize

    1.1MB

  • memory/1608-65-0x0000000002640000-0x0000000002760000-memory.dmp
    Filesize

    1.1MB

  • memory/1608-67-0x0000000002640000-0x0000000002760000-memory.dmp
    Filesize

    1.1MB

  • memory/1608-69-0x0000000002640000-0x0000000002760000-memory.dmp
    Filesize

    1.1MB

  • memory/1608-68-0x0000000002640000-0x0000000002760000-memory.dmp
    Filesize

    1.1MB