Analysis

  • max time kernel
    144s
  • max time network
    179s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    22/12/2022, 16:28

General

  • Target

    TopeFreeKeybindsFixed.exe

  • Size

    5.0MB

  • MD5

    21bd829e45cbf3cb5c9bae52ec2e67a1

  • SHA1

    7bf01627c76013f2892ded4b04f077c4c6e132ad

  • SHA256

    3219bf51eda152963c4c41e632f5884de50a8f404aa56b4f7c544f9d28794818

  • SHA512

    8725dec3000e36ba7a2a4c391b7c114dcaa25b6e2584a7b6dd7a1ae664b4dd08d7ee377d7d8f430bac0af9faec5f2f7e4795339fb01720ece4131a0bb60eb2e2

  • SSDEEP

    98304:Jofjrn8KAJ8tHYiKsLdOLUI2hfCwA+aXIbQOP4nv/:JGHaAnKsJOLB2hfCxtXIbc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TopeFreeKeybindsFixed.exe
    "C:\Users\Admin\AppData\Local\Temp\TopeFreeKeybindsFixed.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3668

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3668-118-0x0000000140000000-0x000000014089F000-memory.dmp

          Filesize

          8.6MB

        • memory/3668-121-0x0000000140000000-0x000000014089F000-memory.dmp

          Filesize

          8.6MB

        • memory/3668-122-0x0000000140000000-0x000000014089F000-memory.dmp

          Filesize

          8.6MB