a346595fe9232e039e99763b5fab73cb11383d9d8ec5cbafd861e84fb376e30d | Triage

Analysis

max time kernel
188s
max time network
203s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24/11/2022, 11:37

Sharing

Report Analysis Logs

General

Target

AMR Player/AMRPlayer_99D.COM.exe
Size

810KB
MD5

05e8d5fff2f13b37f7cbac6c24f0fef2
SHA1

7fac1642d903f145600df1d9a24be7cdc7a24dab
SHA256

0cb1b1dc6abdc046c47fc94163b5264b934fd4d53915e88153e5b99de211b91a
SHA512

65b94812b719c7edc19e670fd998a4950eb7f00d8c7940ff34dfb7bf36d725111dd6e55df8e6e8991b577b5957ba941924869f10557863b2468d6c09db25cb5b
SSDEEP

24576:tF2EwsMJsFgr442XJnhb+YI4aXAZw1LVK:bMJX29ocSVK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2556	AMRPlayer_99D.COM.exe

C:\Users\Admin\AppData\Local\Temp\AMR Player\AMRPlayer_99D.COM.exe
"C:\Users\Admin\AppData\Local\Temp\AMR Player\AMRPlayer_99D.COM.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2556-132-0x0000000011000000-0x0000000011062000-memory.dmp

Filesize
392KB

Download
memory/2556-133-0x0000000011000000-0x0000000011062000-memory.dmp

Filesize
392KB

Download