Analysis

  • max time kernel
    43s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2023 14:12

General

  • Target

    1584-66-0x0000000000400000-0x000000000042F000-memory.exe

  • Size

    188KB

  • MD5

    0fe0d751a2e85df4fbd5976f5ff469e6

  • SHA1

    b36643695bbbc48a83f32b69bfb67bc003fac7ea

  • SHA256

    a49a3a8100e539295849df2e4e9c9007137bc6ba7e05fcfa493e962fa53a55c3

  • SHA512

    724a5fc8922edd2c425f8fb949beb3597710e9378e6be758ae7ac76c0086e2777726e4602c97b36464446797fa59ab0af749c088b2c38bb4330ba0f70f10d7ec

  • SSDEEP

    3072:HOBYEUOrW8l6z3DuCMPR8qzbxYuRD+2vk7c4ACTNSq:5OibDlU8qzbxY2D+0fgS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1584-66-0x0000000000400000-0x000000000042F000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1584-66-0x0000000000400000-0x000000000042F000-memory.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/540-54-0x0000000000AA0000-0x0000000000DA3000-memory.dmp
    Filesize

    3.0MB