Analysis

  • max time kernel
    45s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    03-12-2022 11:53

General

  • Target

    e45dd5f38869eeec9fe93288541152dd88454df6d1eb985980ba9ee497fb9a8f.exe

  • Size

    599KB

  • MD5

    75698e03cac55140d8390f9fc229f579

  • SHA1

    e5219ba27907680b3f3e2b145e972c14cbc70542

  • SHA256

    e45dd5f38869eeec9fe93288541152dd88454df6d1eb985980ba9ee497fb9a8f

  • SHA512

    76f49dabbce61fffb2b14aa345a829fec085c1e321eb94c5e8b293f7a3b6fb0afd6c17d68c5e4a93ae3e66a5293de342722b04e515d36c84ca8e3c0d63dc43ed

  • SSDEEP

    12288:EkWTO2piLyv08au4Jc30n4tUbL2GpYuYwSES:uXcc08auMnkmL2Gew0

Score
1/10

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e45dd5f38869eeec9fe93288541152dd88454df6d1eb985980ba9ee497fb9a8f.exe
    "C:\Users\Admin\AppData\Local\Temp\e45dd5f38869eeec9fe93288541152dd88454df6d1eb985980ba9ee497fb9a8f.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:1604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1604-54-0x0000000076461000-0x0000000076463000-memory.dmp

    Filesize

    8KB

  • memory/1604-55-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/1604-56-0x0000000000290000-0x00000000002CB000-memory.dmp

    Filesize

    236KB

  • memory/1604-57-0x00000000004A0000-0x0000000000532000-memory.dmp

    Filesize

    584KB

  • memory/1604-58-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB