Analysis

  • max time kernel
    105s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-03-2023 05:28

General

  • Target

    01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264.exe

  • Size

    181KB

  • MD5

    98994d7606e0c9da417024c03c54b591

  • SHA1

    fa4e90845234e35c27fb5d1a2f61fd02d5c3d3f7

  • SHA256

    01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264

  • SHA512

    ecd5c8fe6deca84bbfefab70cbea0f2ab20663d4e0317b44514d639f208c1038298b1fd4890b10210564c49c4d168ff97d1f7a978b00a8e2edfe9e4a77246506

  • SSDEEP

    3072:2bX4kQvFJdO43t/c5scFV6hP/zSJRCUweMoeks3jG1ZlRRR:BU2tk5B6hP/MC9e3eHzG1Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264.exe
    "C:\Users\Admin\AppData\Local\Temp\01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2672-133-0x00000000009E0000-0x0000000000D2A000-memory.dmp
    Filesize

    3.3MB