Overview

overview

4

Static

static

cb60974faf...25.exe

windows7-x64

4

cb60974faf...25.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    36s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    01-12-2022 08:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25.exe

  • Size

    84KB

  • MD5

    cba70926e3c2b4d1811c9bb51d4eade8

  • SHA1

    6dde434a5d3361862af42c2a793e8fb7f2c39363

  • SHA256

    cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25

  • SHA512

    9508337303ba109b29dc992391b7fa11e98e21dce38177538e394b97b113418c15f1459092f11fe8e856115364fb6730cb7b1efe2fd9c3433fa345dbbd8fce92

  • SSDEEP

    1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUN:5m8nBjTmbxRBRN6WYiKqVo6ZN

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:1324
      • C:\Users\Admin\AppData\Local\Temp\cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25.exe
        "C:\Users\Admin\AppData\Local\Temp\cb60974faf01397ca8559f27e5d6b7260ad3d90a3690c00cd50593199aa86b25.exe"
        2⤵
        • Drops file in Windows directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1972

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads