Analysis
-
max time kernel
52s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
01-12-2022 08:34
General
-
Target
f29c4f08a22b16873f37c3611800c6849ad03c5dba421d77cc8612875774f287.exe
-
Size
84KB
-
MD5
c14948126ad139ae5c923634955cc94f
-
SHA1
3de0568c5a72ea6d8887f38f363d854789c25560
-
SHA256
f29c4f08a22b16873f37c3611800c6849ad03c5dba421d77cc8612875774f287
-
SHA512
64dbf799dd16924abebd5c290fa0f662b58271a3838cd6cebb34cfe81e6eeabe221089f7f683ba3f1c2337a19fc71bf9a14456370fe6d666e5ec7c804249355a
-
SSDEEP
1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUh:5m8nBjTmbxRBRN6WYiKqVo6Zh
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\f29c4f08a22b16873f37c3611800c6849ad03c5dba421d77cc8612875774f287.exe"C:\Users\Admin\AppData\Local\Temp\f29c4f08a22b16873f37c3611800c6849ad03c5dba421d77cc8612875774f287.exe"2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-