Overview

overview

5

Static

static

25ba4c0261...e6.exe

windows7-x64

5

25ba4c0261...e6.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    127s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    31/01/2023, 20:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    25ba4c0261f6c191e9484d799b4e6735a6050dff3f16bc731757fbd709c535e6.exe

  • Size

    294KB

  • MD5

    bb37302c6943a820e8898cfcac71c995

  • SHA1

    045b9d7cdd36e0ad567cd6c54d19c968c6e07aec

  • SHA256

    25ba4c0261f6c191e9484d799b4e6735a6050dff3f16bc731757fbd709c535e6

  • SHA512

    e1256b09495781b643a81daf0adcf291846411d6f6d5ffd35ae02a8bc06a36dfda4acbefafebef9114572f4428ff9771ee469848be4f99be23ff3bfa105edf62

  • SSDEEP

    6144:qUrqA3AheuswyPn85JgeoGCWDrz50GZ2wlWyVq1YqphwpOEbdx9pXKaI:qUWA3Aheuswy/SBhZ3Vq+qPFCgX

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\25ba4c0261f6c191e9484d799b4e6735a6050dff3f16bc731757fbd709c535e6.exe
    "C:\Users\Admin\AppData\Local\Temp\25ba4c0261f6c191e9484d799b4e6735a6050dff3f16bc731757fbd709c535e6.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious behavior: GetForegroundWindowSpam
    PID:840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/840-54-0x0000000075FF1000-0x0000000075FF3000-memory.dmp

    Filesize

    8KB

    Download