Overview

overview

4

Static

static

744b59182e...90.exe

windows7-x64

4

744b59182e...90.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    223s
  • max time network
    236s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2022, 01:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    744b59182e45836ca92cd37a72dd43f5682c4fef1cd57983bf8d4bd6478cdd90.exe

  • Size

    81KB

  • MD5

    2d50ad95122cc3c1b6bc3cb697b63330

  • SHA1

    c8d705388f8dda0f943b1bebd5fb0728fb3eda7e

  • SHA256

    744b59182e45836ca92cd37a72dd43f5682c4fef1cd57983bf8d4bd6478cdd90

  • SHA512

    c5329c40764a9114c4c70e2e61a880a44f3e1e923cc07e0419174cb94201380e35d0e26861f9deaf46cb2d8d8c80cd46cdc7c5df06e4e58d9c55d3927e1ae483

  • SSDEEP

    1536:wehQCpnT3PfjzL3PoX7viMFs6Int87sBo6rzlRo:weyCp7PLPf27viM/IqgW63To

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:2632
      • C:\Users\Admin\AppData\Local\Temp\744b59182e45836ca92cd37a72dd43f5682c4fef1cd57983bf8d4bd6478cdd90.exe
        "C:\Users\Admin\AppData\Local\Temp\744b59182e45836ca92cd37a72dd43f5682c4fef1cd57983bf8d4bd6478cdd90.exe"
        2⤵
        • Drops file in Windows directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:308

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads