Analysis

  • max time kernel
    0s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2023, 02:19

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\csrss.exe command="C:\Users\Admin\AppData\Local\Temp\csrss.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    csrss.exe

  • Size

    37KB

  • MD5

    696fb9d7e43f428634f31cf56361d7c3

  • SHA1

    9006ccac001d1352d004788ac1d134bd266a82d7

  • SHA256

    eac814cee400a078e2d549ba6e3d7bd09d1bc9805a1c6c9ec0610a0e558472a1

  • SHA512

    da9f91fccb0038b0a06a27f1a2e5481907727fab1c963b325d4d663e351f750640c52d4d19770b7cee151d0ee3bcefaf9dc64fe8fef4f355f81a96bb64315070

  • SSDEEP

    384:eXRMI/nW58nW2eG0mBDBRJiWq0Z1Z0R9zbPpk:2MohrTDB1Pi9sZ49zdk

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\csrss.exe
    "C:\Users\Admin\AppData\Local\Temp\csrss.exe"
    1⤵
      PID:1312

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads