Analysis
- max time kernel
65s - max time network
87s - platform
windows7_x64 - resource
win7-20221111-en - resource tags
- submitted
03/12/2022, 19:16
General
- Target 035e9862f696bc688e3fa1e8a3b3ef5e.exe
- Size 7.3MB
- Sample221203-xyssvscc2v
- SHA256 1b06b05b3d03c253f9bfa45fd2d02a982a0dcc4290a531ef0786b9d6092b041c
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\035e9862f696bc688e3fa1e8a3b3ef5e.exe"C:\Users\Admin\AppData\Local\Temp\035e9862f696bc688e3fa1e8a3b3ef5e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1808-54-0x0000000000400000-0x0000000001082000-memory.dmp
memory/1808-58-0x0000000002CA0000-0x00000000031B9000-memory.dmp
memory/1808-59-0x0000000000400000-0x0000000001082000-memory.dmp
memory/1808-60-0x0000000002CA0000-0x00000000031B9000-memory.dmp
memory/1808-61-0x0000000002AF0000-0x0000000002BF1000-memory.dmp
memory/1808-62-0x0000000002AF0000-0x0000000002BF1000-memory.dmp
memory/1808-63-0x0000000075511000-0x0000000075513000-memory.dmp
memory/1808-64-0x0000000000400000-0x0000000001082000-memory.dmp
memory/1808-65-0x0000000002CA0000-0x00000000031B9000-memory.dmp
memory/1808-66-0x0000000002AF0000-0x0000000002BF1000-memory.dmp
memory/1808-67-0x000000000D880000-0x000000000D9F7000-memory.dmp
memory/1808-68-0x000000000D780000-0x000000000D944000-memory.dmp
memory/1808-69-0x0000000002AF0000-0x0000000002BF1000-memory.dmp