Analysis
-
max time kernel
151s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30-11-2022 18:43
Behavioral task
behavioral1
Sample
fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exe
Resource
win10v2004-20220812-en
General
-
Target
fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exe
-
Size
244KB
-
MD5
e6381e8d05c4128dd99d37645a45b5cf
-
SHA1
421975d22cffc82347235d72f5be00da7b5e83c2
-
SHA256
fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a
-
SHA512
b17d1240b92b7f11b6890a9c657ed90b324d614d0828080a4d5c90d698400223feccb16bd5a19214862fe45854678aa8114cfdbb649d4a46565966b63348e241
-
SSDEEP
3072:tCTYwKihoNUHIlbFJ0eeonc4yZaqQpuJhUG6lh+fA0x9D+tzywanQ8udrBb:tcYwKihoWAHh/iZNCehUGhx9DrTQxdVb
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exepid process 1572 fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exe -
Suspicious behavior: RenamesItself 1 IoCs
Processes:
fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exepid process 1572 fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exe"C:\Users\Admin\AppData\Local\Temp\fd1dcf0ea59a27ea4774b7c97abf968bd2bf495758163342e284cdfa55597f2a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1572-54-0x00000000758C1000-0x00000000758C3000-memory.dmpFilesize
8KB