74e2e74a0115644594768d827af3b6bf70190be406fc783e78133e7b42498b50 | Triage

Analysis

max time kernel
9s
max time network
35s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
31-03-2023 21:47

Sharing

Report Analysis Logs

General

Target

sdax.exe
Size

725.8MB
MD5

0207380aa8e83e8aaf7a7defc60ddd6e
SHA1

ceb93d22de83ad1c993096c12e66929a605c013c
SHA256

74e2e74a0115644594768d827af3b6bf70190be406fc783e78133e7b42498b50
SHA512

cef4a45b7b9c73e66f6c901267a8b9edb71e0bcad150ab82afb50ef892a5cc4b06c50522f74c29818cd83e0049b116044f33a0921ffe1e741ab1ba67cdb0019f
SSDEEP

98304:udcR2OyrVRPLlO/otpGnOYwxR7hv88+MqgtJjKniUDsMsqAnqCN7hmP:ueVyrLg/onGl9pMbtJjKiOpAqCN7h8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1212	sdax.exe

C:\Users\Admin\AppData\Local\Temp\sdax.exe
"C:\Users\Admin\AppData\Local\Temp\sdax.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1212-54-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1212-55-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1212-56-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1212-57-0x0000000000400000-0x0000000000D10000-memory.dmp

Filesize
9.1MB

Download