Analysis
-
max time kernel
42s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
01-12-2022 08:36
General
-
Target
dc7b3d35cfd9bdea3906c66e24c16db659c76d99e4384cf053956cac8c94186f.exe
-
Size
84KB
-
MD5
8334ea0e43e0640bbed5df7162b50c3c
-
SHA1
0504f7063fc58385cb8b61483cea5a837d5a9cd0
-
SHA256
dc7b3d35cfd9bdea3906c66e24c16db659c76d99e4384cf053956cac8c94186f
-
SHA512
3c82a3c408c0f11f52adc0ff4ae0383ce519427a2a2646bf60ed9bf72bf4355205528214ed221a1157515e5487e21bb3a0847b3473f7ad79ac4e7d2ae86e6dc6
-
SSDEEP
1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUu:5m8nBjTmbxRBRN6WYiKqVo6Zu
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc7b3d35cfd9bdea3906c66e24c16db659c76d99e4384cf053956cac8c94186f.exe"C:\Users\Admin\AppData\Local\Temp\dc7b3d35cfd9bdea3906c66e24c16db659c76d99e4384cf053956cac8c94186f.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵