Analysis

  • max time kernel
    188s
  • max time network
    197s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2022 19:15

General

  • Target

    f23cd0fe7e1a1535e4de7c859c8cf7703f7850f313c128dc54443dcb564c8986.exe

  • Size

    225KB

  • MD5

    28b38de927c357184b3e105fe0c229ee

  • SHA1

    363e542e35a5b45cf88f1204958b03b2cb56189e

  • SHA256

    f23cd0fe7e1a1535e4de7c859c8cf7703f7850f313c128dc54443dcb564c8986

  • SHA512

    3eee538fdbbdedc1f0ee6d815606552b1c2e4f45fdcb38f449922b10591a6f2ba1633b20e18b6e42de52028dcaba2369d59b91807469aaef980cfde67a82db45

  • SSDEEP

    3072:ORNo4uD5grvN3OfOVhr6EwJNkGv7nEiyYkPqbo61taKzBm89cju:+wNCvI2VhrMV7nEUai

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f23cd0fe7e1a1535e4de7c859c8cf7703f7850f313c128dc54443dcb564c8986.exe
    "C:\Users\Admin\AppData\Local\Temp\f23cd0fe7e1a1535e4de7c859c8cf7703f7850f313c128dc54443dcb564c8986.exe"
    1⤵
      PID:2836

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2836-132-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

    • memory/2836-135-0x00000000009E0000-0x00000000009E3000-memory.dmp

      Filesize

      12KB