Analysis
-
max time kernel
188s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01-12-2022 08:48
General
-
Target
53772a2d985ec2e0d742465863beed58f4c80fb0bca5ecb038119c01d8178975.exe
-
Size
84KB
-
MD5
ffd9010aca87c2639441d3fd0d70571a
-
SHA1
a0f1565d2957b329548e9c4fe6db405ddb150a56
-
SHA256
53772a2d985ec2e0d742465863beed58f4c80fb0bca5ecb038119c01d8178975
-
SHA512
608d6c6f95cec1f549b1d96ac6c195395b230a207963bfe15a10cea1e2728466e5feff99a36526c6edd832ffd4ac509acdafd5ae1f6dec6242f2ca1f328eff9e
-
SSDEEP
1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EUE:5m8nBjTmbxRBRN6WYiKqVo6ZE
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\53772a2d985ec2e0d742465863beed58f4c80fb0bca5ecb038119c01d8178975.exe"C:\Users\Admin\AppData\Local\Temp\53772a2d985ec2e0d742465863beed58f4c80fb0bca5ecb038119c01d8178975.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵