Analysis

  • max time kernel
    45s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    16-01-2023 20:17

General

  • Target

    67c31c5794f8158756745a674e28f5412c81f3109d1af2cbcc2ad91f649ed954.exe

  • Size

    1.9MB

  • MD5

    51db87bd259c144a2f8502be3a964d32

  • SHA1

    999cdf0c67555c620da7c311d4be77fb19932b59

  • SHA256

    67c31c5794f8158756745a674e28f5412c81f3109d1af2cbcc2ad91f649ed954

  • SHA512

    0873340d9b0d683a8fea0ab61ef6e3931bf93de78a6b64ff2337a831bda982aa9cead3105a6876275b0f3f67f9c0131e9400e4ded69ab55278aea524c36397b0

  • SSDEEP

    49152:JaBIOU793vSNKyqwTyxRLloBY/2Aq7ppL99YZnfXT:JHzx36NKylTyxRLlmY/2Aq9pL4Znfj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\67c31c5794f8158756745a674e28f5412c81f3109d1af2cbcc2ad91f649ed954.exe
    "C:\Users\Admin\AppData\Local\Temp\67c31c5794f8158756745a674e28f5412c81f3109d1af2cbcc2ad91f649ed954.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1368-54-0x0000000000770000-0x00000000008FD000-memory.dmp

    Filesize

    1.6MB

  • memory/1368-55-0x0000000074E41000-0x0000000074E43000-memory.dmp

    Filesize

    8KB

  • memory/1368-56-0x000000000CD70000-0x000000000D022000-memory.dmp

    Filesize

    2.7MB

  • memory/1368-57-0x0000000000770000-0x00000000008FD000-memory.dmp

    Filesize

    1.6MB

  • memory/1368-58-0x000000000CD70000-0x000000000CF34000-memory.dmp

    Filesize

    1.8MB

  • memory/1368-59-0x0000000000770000-0x00000000008FD000-memory.dmp

    Filesize

    1.6MB