Overview

overview

1

Static

static

8115a4b819...71.exe

windows7-x64

1

8115a4b819...71.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    61s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 09:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8115a4b81941853ca57c33b8b3d5bb7fd8b56621f89951d48a6b0ed120847c71.exe

  • Size

    138KB

  • MD5

    af5cfbf46db278cf22afc41f095da549

  • SHA1

    f92da6f01408157e6f9bc6a73a9866329e5f0816

  • SHA256

    8115a4b81941853ca57c33b8b3d5bb7fd8b56621f89951d48a6b0ed120847c71

  • SHA512

    9ecaa1685d2dbcd7cd16f942a6232bf506f85451d889cb96d32577b8452da90c3a4ff31916dd7381416441119a80d3dcee046861d0942941fbac7284f957c9b5

  • SSDEEP

    3072:RgPUazP9OoyPW2LkaJCVUGHCt0mWPdw33hZVPWyZCpfvCNKK4EChtbE:2PnBODW2LkaJAHNvPdQ31PBENuKK4bdE

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:2440
      • C:\Users\Admin\AppData\Local\Temp\8115a4b81941853ca57c33b8b3d5bb7fd8b56621f89951d48a6b0ed120847c71.exe
        "C:\Users\Admin\AppData\Local\Temp\8115a4b81941853ca57c33b8b3d5bb7fd8b56621f89951d48a6b0ed120847c71.exe"
        2⤵
        • Suspicious use of UnmapMainImage
        • Suspicious use of WriteProcessMemory
        PID:400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/400-132-0x0000000000400000-0x0000000000418000-memory.dmp

      Filesize

      96KB

      Download