Analysis
-
max time kernel
243s -
max time network
335s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
01/12/2022, 08:49
General
-
Target
414f97fb5358cdaeb28288558570fa1e9eea26daa75ad6a3a7c141b02c0d0cc7.exe
-
Size
84KB
-
MD5
eb9122d78b3d4df919924f2cf9f99806
-
SHA1
a10f1218fae52fad7919694aff940f50ab32cc7b
-
SHA256
414f97fb5358cdaeb28288558570fa1e9eea26daa75ad6a3a7c141b02c0d0cc7
-
SHA512
a891ddee7a980eaf05b251c31f48205d517bdf4ac9c55f6cad1d87b0b3b99439e47cb2f08bd09b275821ac4e746cdbffed93222ac2de1463fbde79a4b026e6d6
-
SSDEEP
1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUt:5m8nBjTmbxRBRN6WYiKqVo6Zt
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\414f97fb5358cdaeb28288558570fa1e9eea26daa75ad6a3a7c141b02c0d0cc7.exe"C:\Users\Admin\AppData\Local\Temp\414f97fb5358cdaeb28288558570fa1e9eea26daa75ad6a3a7c141b02c0d0cc7.exe"2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-