Analysis

  • max time kernel
    40s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    02-12-2022 01:08

General

  • Target

    01fd20f1fc32a071d2c7751720f785cb0ba264bf1187324a6222fac63f21c497.exe

  • Size

    446KB

  • MD5

    275d4f4b30adf9fb891084ec2f596501

  • SHA1

    5d12c20f59b4d814632f6d471e07584ba5802893

  • SHA256

    01fd20f1fc32a071d2c7751720f785cb0ba264bf1187324a6222fac63f21c497

  • SHA512

    bc0086685d66a71f17da283ee50084cb1b3eb58276155326394af489422c221d38f91583ccbe2b97520770ca90fd0e419cd1160b891e31d5499aa5b8b40ef70f

  • SSDEEP

    12288:HNylwlTW+C5IxJ845HYV5sxOH/ccccccceJ:HN3leav84a5sxO

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\01fd20f1fc32a071d2c7751720f785cb0ba264bf1187324a6222fac63f21c497.exe
    "C:\Users\Admin\AppData\Local\Temp\01fd20f1fc32a071d2c7751720f785cb0ba264bf1187324a6222fac63f21c497.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:1488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1488-54-0x0000000076681000-0x0000000076683000-memory.dmp

    Filesize

    8KB

  • memory/1488-55-0x0000000001C50000-0x0000000001C9C000-memory.dmp

    Filesize

    304KB

  • memory/1488-57-0x0000000000400000-0x000000000044C000-memory.dmp

    Filesize

    304KB

  • memory/1488-56-0x0000000001C50000-0x0000000001C9C000-memory.dmp

    Filesize

    304KB