Overview

overview

1

Static

static

20aa1627fc...58.exe

windows7-x64

1

20aa1627fc...58.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    98s
  • max time network
    66s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    26-11-2022 16:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20aa1627fcce6d4edd7d15a960e7331f987f65f64953d1a1ba6ef053faec9658.exe

  • Size

    192KB

  • MD5

    a9454ed0d686fb8ebee066ba8aa1e361

  • SHA1

    ec9bcdd5704461d2cb208449ea6a05faa43c5142

  • SHA256

    20aa1627fcce6d4edd7d15a960e7331f987f65f64953d1a1ba6ef053faec9658

  • SHA512

    3ead8ca3a26762b42c9d05a07b6d5a5e88aafd2308ed3ea9c43d630b5f092ded14954268ee626fe62cfd558dabbb1cf3c6f25bd72dcffee61571f09aa4c4480a

  • SSDEEP

    3072:LlPPPksNEWiZ1kyKE+IKtkr93JRjwsmVUHDnXI+3gTVzyscJaQOMpAQdI6VQX:LlNiQIKtu/wDUk5JyTEMHVQX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\20aa1627fcce6d4edd7d15a960e7331f987f65f64953d1a1ba6ef053faec9658.exe
    "C:\Users\Admin\AppData\Local\Temp\20aa1627fcce6d4edd7d15a960e7331f987f65f64953d1a1ba6ef053faec9658.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1392-54-0x0000000075BE1000-0x0000000075BE3000-memory.dmp
    Filesize

    8KB

    Download