Analysis

  • max time kernel
    22s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 17:12

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\0481a67af4acae3cc2dd34a31a18116fe30f0e56004a9f63169c820fbef8d15a.exe command="C:\Users\Admin\AppData\Local\Temp\0481a67af4acae3cc2dd34a31a18116fe30f0e56004a9f63169c820fbef8d15a.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    0481a67af4acae3cc2dd34a31a18116fe30f0e56004a9f63169c820fbef8d15a.exe

  • Size

    635KB

  • MD5

    4def84550f9eb451d72fa6716e20c510

  • SHA1

    fac09bb470fddf69625bb1cad67adbefb7e04002

  • SHA256

    0481a67af4acae3cc2dd34a31a18116fe30f0e56004a9f63169c820fbef8d15a

  • SHA512

    32c736ebc21ac21b67e8d88ba45ade703c25a648972612c8bd58e4cafe5e31843df87860cea08c23b5c753bf8383c2d2b25ed831298807aa1e3ff49e11a264b8

  • SSDEEP

    6144:CdLjJ2M4qdiG6wKt6wVXHgQ3Zcfhfi4Che+/xmbas2E++P0PzJCwF4PimfhR/NvZ:/yV6wKtVXHl0h64Clxmbas2JG7hLFyoJ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\0481a67af4acae3cc2dd34a31a18116fe30f0e56004a9f63169c820fbef8d15a.exe
    "C:\Users\Admin\AppData\Local\Temp\0481a67af4acae3cc2dd34a31a18116fe30f0e56004a9f63169c820fbef8d15a.exe"
    1⤵
      PID:4292

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4292-132-0x0000000001000000-0x00000000010A1000-memory.dmp

      Filesize

      644KB