c0178dc0e1f125da7b6bab419edc783fdff63a376019140e086e6bc10ec588bd | Triage

Analysis

max time kernel
46s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
16-12-2022 12:26

Sharing

Report Analysis Logs

General

Target

file.exe
Size

1.3MB
MD5

94291b52692122ab90b75b90707ca062
SHA1

4ef14839102959f7b63b2988379f3aa0408c6cc4
SHA256

c0178dc0e1f125da7b6bab419edc783fdff63a376019140e086e6bc10ec588bd
SHA512

eba0b83e69eee6c49ad3e8ed9d1955ff3f87b8637d04d0610d0a4605974415ed45fd83dc910ed335290c01908db3cd8fe81bbcf15c989978e448dff5acc81a44
SSDEEP

24576:Nul96k3/hS8anVFj9vMzQo3SSH3PujZCg7EuRsQ8rRs8FN/MvV18fkWf:H18aVFj9vRo3vHfIUgTRsQ8rK8LktGss

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
1324	file.exe
1324	file.exe
1324	file.exe
1324	file.exe
1324	file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1324-54-0x00000000022B0000-0x00000000023DE000-memory.dmp

Filesize
1.2MB

Download
memory/1324-55-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Filesize
8KB

Download
memory/1324-56-0x0000000010A40000-0x0000000010D14000-memory.dmp

Filesize
2.8MB

Download
memory/1324-57-0x00000000022B0000-0x00000000023DE000-memory.dmp

Filesize
1.2MB

Download