Analysis

  • max time kernel
    28s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2023 12:51

General

  • Target

    some_malicious_file.exe

  • Size

    164KB

  • MD5

    890a58f200dfff23165df9e1b088e58f

  • SHA1

    74e3d82f7ee81109e150dc41112cf95b3a4b5307

  • SHA256

    5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93

  • SHA512

    2ee3636833cd9b02f5e311401817b15514845d4c12c1416d7e345845f8084775bf8c5f8f32822066b75a6b627a93138a0b27deb99c8bbb1f8d640132a2d8de0d

  • SSDEEP

    3072:Hp5SexkWi1Lbi4eTMlwDCnu/q2GB96W/y:JvGWwbnWJ/yB9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\some_malicious_file.exe
    "C:\Users\Admin\AppData\Local\Temp\some_malicious_file.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1344-54-0x0000000000220000-0x000000000022A000-memory.dmp
    Filesize

    40KB

  • memory/1344-55-0x0000000000B00000-0x0000000000BC9000-memory.dmp
    Filesize

    804KB

  • memory/1344-56-0x0000000000D10000-0x0000000000DAF000-memory.dmp
    Filesize

    636KB

  • memory/1344-57-0x0000000000DB0000-0x0000000000EDD000-memory.dmp
    Filesize

    1.2MB

  • memory/1344-58-0x0000000000310000-0x000000000032F000-memory.dmp
    Filesize

    124KB

  • memory/1344-59-0x0000000002610000-0x0000000002719000-memory.dmp
    Filesize

    1.0MB

  • memory/1344-60-0x0000000000260000-0x0000000000266000-memory.dmp
    Filesize

    24KB

  • memory/1344-62-0x0000000000240000-0x0000000000241000-memory.dmp
    Filesize

    4KB

  • memory/1344-61-0x0000000000230000-0x0000000000231000-memory.dmp
    Filesize

    4KB

  • memory/1344-63-0x0000000000250000-0x0000000000251000-memory.dmp
    Filesize

    4KB

  • memory/1344-64-0x0000000000260000-0x0000000000266000-memory.dmp
    Filesize

    24KB

  • memory/1344-65-0x0000000000260000-0x0000000000266000-memory.dmp
    Filesize

    24KB