Analysis

  • max time kernel
    0s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/11/2022, 10:37

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\f875b8a3191a043d6f178ad571514ea62ad835399f1e4e1a4ab34d1288492e58.exe command="C:\Users\Admin\AppData\Local\Temp\f875b8a3191a043d6f178ad571514ea62ad835399f1e4e1a4ab34d1288492e58.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    f875b8a3191a043d6f178ad571514ea62ad835399f1e4e1a4ab34d1288492e58.exe

  • Size

    29KB

  • MD5

    eab2ccda9bd1293b7a9e03f285e0c2d3

  • SHA1

    1af874cf5eda880d8bd6403d73e2078cc2aa006f

  • SHA256

    f875b8a3191a043d6f178ad571514ea62ad835399f1e4e1a4ab34d1288492e58

  • SHA512

    c7f6b3a686456b829bf0a9f21e1a1a25d1416b9e5e120065508859fee6c4a9b0446341607e0ac22dbb7e6447ea40ea86db6d521e77aa7a42d3a805d2acdcc3e1

  • SSDEEP

    384:eij+SGOcg3rprg/iSix0gUAEan7aXCocTeDG5AXE/xWDdA9sl7fTz7u+6jKrXSkc:n6u+Xrikdv6urt

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\f875b8a3191a043d6f178ad571514ea62ad835399f1e4e1a4ab34d1288492e58.exe
    "C:\Users\Admin\AppData\Local\Temp\f875b8a3191a043d6f178ad571514ea62ad835399f1e4e1a4ab34d1288492e58.exe"
    1⤵
      PID:800

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/800-54-0x0000000000010000-0x0000000000017640-memory.dmp

      Filesize

      29KB