Analysis

  • max time kernel
    20s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29-11-2022 12:06

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\802bfed184ce103ba746f11453e403d1c4151fac1adfa3db73d2f2eb17c120b6.exe command="C:\Users\Admin\AppData\Local\Temp\802bfed184ce103ba746f11453e403d1c4151fac1adfa3db73d2f2eb17c120b6.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    802bfed184ce103ba746f11453e403d1c4151fac1adfa3db73d2f2eb17c120b6.exe

  • Size

    1.2MB

  • MD5

    db437222391306f88f64edbb28dabaed

  • SHA1

    396066148bdceb23050fdcab247f8e1458f1738e

  • SHA256

    802bfed184ce103ba746f11453e403d1c4151fac1adfa3db73d2f2eb17c120b6

  • SHA512

    502af270bf4783522e8addb5bca3279ec8c9820793c818ee63ae2b0112bc88395989d1478a78ffd22bc14114e0eddcc4e1cd5de77d0af7ce625f82ef2ffcb3f2

  • SSDEEP

    24576:znvuuO/YmFyHHX+gSmfwlYNFxE4LSG+M4XG8nKozV6shstBKwS:e/NFyH3+0oGN3XE3aBZS

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\802bfed184ce103ba746f11453e403d1c4151fac1adfa3db73d2f2eb17c120b6.exe
    "C:\Users\Admin\AppData\Local\Temp\802bfed184ce103ba746f11453e403d1c4151fac1adfa3db73d2f2eb17c120b6.exe"
    1⤵
      PID:984

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/984-54-0x0000000000010000-0x000000000015E000-memory.dmp

      Filesize

      1.3MB