dd764b65ea0e795246b6162fbe9216c5c05aa478fb2a1a9d20523d1fc7978919 | Triage

Analysis

max time kernel
29s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
02/04/2023, 15:05

Sharing

Report Analysis Logs

General

Target

cymon2.exe
Size

211KB
MD5

79cbd3878fbec2dc037d511b1285db68
SHA1

46bbc5e54747679d7c7cb7d640f94e343896e621
SHA256

dd764b65ea0e795246b6162fbe9216c5c05aa478fb2a1a9d20523d1fc7978919
SHA512

6058fe3e17d037b74be3caa13c23d1803f277b6148207705dd5f1c15b2f0d67b83eb509c010b368a231e685c8333d3b2bc680b0fe71af38677684d3bf0683ff0
SSDEEP

3072:960NWjxyUmiPHIK3R6l1+Q77B9QFiVaXmf7Zdb:w0NaHPo+0/+Q9rVtZdb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1616	cymon2.exe

C:\Users\Admin\AppData\Local\Temp\cymon2.exe
"C:\Users\Admin\AppData\Local\Temp\cymon2.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-54-0x00000000001D0000-0x00000000001E1000-memory.dmp

Filesize
68KB

Download
memory/1616-55-0x000000013FA80000-0x000000013FAB2000-memory.dmp

Filesize
200KB

Download