Overview

overview

4

Static

static

1223a7e94d...7d.exe

windows7-x64

4

1223a7e94d...7d.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    92s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 08:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1223a7e94dd27ba5a9c496ba1e170a7bfe428f586de3b2f7a4d7d3e50016337d.exe

  • Size

    84KB

  • MD5

    a73b8c45983686693cc04fc99c73bab1

  • SHA1

    c1765b6e83c4d338691555d8bcc2f76decc17018

  • SHA256

    1223a7e94dd27ba5a9c496ba1e170a7bfe428f586de3b2f7a4d7d3e50016337d

  • SHA512

    ec216d0f51f2ff7b6ab9b7dedf7efabeb08ea84bcea9a1d0b0e61d11189c939525d06731723f406e773cf93aec7fbc8e440ebf3885a0485410c4d400618823dd

  • SSDEEP

    1536:qwm8nBjqs32bxPpBRy32Z6gJlyiKqVo6EU0R:5m8nBjTmbxRBRN6WYiKqVo6ZU

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:2980
      • C:\Users\Admin\AppData\Local\Temp\1223a7e94dd27ba5a9c496ba1e170a7bfe428f586de3b2f7a4d7d3e50016337d.exe
        "C:\Users\Admin\AppData\Local\Temp\1223a7e94dd27ba5a9c496ba1e170a7bfe428f586de3b2f7a4d7d3e50016337d.exe"
        2⤵
        • Drops file in Windows directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1484

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads