Analysis

  • max time kernel
    73s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 12:37

General

  • Target

    fbc42df0c70245f6c35320f6de59e672b62433ea1401257f08efd4b5d25ff27e.exe

  • Size

    357KB

  • MD5

    11427067e4d26fa7de0cf27cb15db60d

  • SHA1

    e2808f8b58efd6c43be289e681d42c6bd19b206d

  • SHA256

    fbc42df0c70245f6c35320f6de59e672b62433ea1401257f08efd4b5d25ff27e

  • SHA512

    9ea521d92a4899be287bd4612e5b9971fb199cab88502021c1e861618736ea5bbc2dc36628ce26a547c5a22488f5bf2f327b7b9282eb9c1fbd1e5cf174a3d3a0

  • SSDEEP

    6144:Xly5Hlx5bd/QAADCwOJVSt1Rdy3sKYd1n+aCyIK3ccnMxj+6hBObRl:Xgzx5RIVYVSXW1K3Dnsi6/i

Score
1/10

Malware Config

Signatures

  • Modifies registry class 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fbc42df0c70245f6c35320f6de59e672b62433ea1401257f08efd4b5d25ff27e.exe
    "C:\Users\Admin\AppData\Local\Temp\fbc42df0c70245f6c35320f6de59e672b62433ea1401257f08efd4b5d25ff27e.exe"
    1⤵
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4844-132-0x0000000000400000-0x0000000000635000-memory.dmp
    Filesize

    2.2MB