Analysis

  • max time kernel
    3s
  • max time network
    4s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 13:12

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\memdump.exe command="C:\Users\Admin\AppData\Local\Temp\memdump.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

General

  • Target

    memdump.exe

  • Size

    104KB

  • MD5

    79f16e98cd6c8e72791bf7c9af6375a6

  • SHA1

    d0decae915af7434e542a790e6c3785dfed05d19

  • SHA256

    c14a03520965659a1f457a209bba053861048059f8ceea9c73c3bef347b58a16

  • SHA512

    53111106a2dcacc1e32ecad0b82fc93e24f1698b1bbfb9da0488ec8bf20739258ecc45415d6e2449cf416f9fa314f58e20f92d7d92f88380a16433aeee41d398

  • SSDEEP

    1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWg2B4u0OVE01:K1VmhaH8EFvWg20OVE0

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads