a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb

General

Target

a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
Size

26KB
MD5

00ff0fb6f1c44d01d157a8bcd21eca80
SHA1

3b1caaedff41bfca1e447f367bb716c56ce2660c
SHA256

a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb
SHA512

7c47950ab7c9c67e13be81815ca7c2601bb3f935b57ea196b9becd9749f63792b50fd7d97759885ece355c45a65718e804c7f55211a4178a8ebc7f26f67b45f8
SSDEEP

768:s1ODKAaDMG8H92RwZNQSwcfymNBg+g61GoL:2fgLdQAQfcfymN

Score

6^/10

Malware Config

Signatures

Enumerates connected drives 3 TTPs 22 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

description	ioc	process
File opened (read-only)	\??\M:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\K:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\J:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\F:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\X:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\U:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\N:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\Y:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\V:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\S:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\R:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\P:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\L:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\I:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\H:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\Z:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\W:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\T:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\G:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\E:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\Q:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened (read-only)	\??\O:	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

Drops file in Program Files directory 64 IoCs

Processes:

a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

description	ioc	process
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\zh_TW\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\idlj.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Microsoft Games\Chess\fr-FR\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ckb\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ff\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\extcheck.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Mozilla Firefox\browser\VisualElements\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\bin\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\en-US\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\hy\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\nn\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\uk\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\de-DE\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Microsoft Games\Multiplayer\Spades\shvlzm.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\policytool.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ml\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\si\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Microsoft Games\Mahjong\es-ES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ko\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\an\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ru\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\de-DE\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\cgg\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\is\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\kn\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\intf\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\es-ES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\javafxpackager.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Java\jre7\bin\jabswitch.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Mozilla Firefox\maintenanceservice.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Google\Chrome\Application\89.0.4389.114\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Google\Chrome\Application\89.0.4389.114\Locales\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\_desktop.ini	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

Drops file in Windows directory 1 IoCs

Processes:

a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

description ioc process

File created C:\Windows\rundl132.exe a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
Runs net.exe

description	ioc	process
File created	C:\Windows\rundl132.exe	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

pid	process
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe

Suspicious use of WriteProcessMemory 10 IoCs

Processes:

a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exenet.exe

description	pid	process	target process
PID 1492 wrote to memory of 1184	1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe	net.exe
PID 1492 wrote to memory of 1184	1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe	net.exe
PID 1492 wrote to memory of 1184	1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe	net.exe
PID 1492 wrote to memory of 1184	1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe	net.exe
PID 1184 wrote to memory of 880	1184	net.exe	net1.exe
PID 1184 wrote to memory of 880	1184	net.exe	net1.exe
PID 1184 wrote to memory of 880	1184	net.exe	net1.exe
PID 1184 wrote to memory of 880	1184	net.exe	net1.exe
PID 1492 wrote to memory of 1264	1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe	Explorer.EXE
PID 1492 wrote to memory of 1264	1492	a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe	Explorer.EXE

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:1264

C:\Users\Admin\AppData\Local\Temp\a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe
"C:\Users\Admin\AppData\Local\Temp\a90d2d7bbb1c48d87dcd336aed3531fa6f08f4decfaf88446ba5b0608188c2bb.exe"
2⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1492

C:\Windows\SysWOW64\net.exe
net stop "Kingsoft AntiVirus Service"
3⤵
- Suspicious use of WriteProcessMemory
PID:1184

C:\Windows\SysWOW64\net1.exe
C:\Windows\system32\net1 stop "Kingsoft AntiVirus Service"
4⤵
PID:880

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/880-56-0x0000000000000000-mapping.dmp

Download
memory/1184-55-0x0000000000000000-mapping.dmp

Download
memory/1492-54-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download
memory/1492-57-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads