9c0b00c20b1b397ff688a1da698420f0f7453b962d4f732ed91189be7cae3c9c | Triage

Analysis

max time kernel
26s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
08-04-2023 10:10

Sharing

Report Analysis Logs

General

Target

POJAN20217.exe
Size

703KB
MD5

fbd062a526493f39857b1ff06b38e3b9
SHA1

cb539fa1dc65214e029a94bb2476b0ec93223549
SHA256

9c0b00c20b1b397ff688a1da698420f0f7453b962d4f732ed91189be7cae3c9c
SHA512

bce4aaa0650ac0e6adafdecd38634a0a9d0b16c81363c341a4457441d376a2a1bcc2cb641cf1f3fd20ff8009fca4ddadec12d9e9d8628bc76e1fa2a580d4fcac
SSDEEP

12288:jhdbZQFXq//Y4v3eftE3LSq/ysk+UlvLFB7u/GFI3dSq0j:zZQlSrvOftE3bxRUFJgdS/j

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

POJAN20217.exe

pid process

1336 POJAN20217.exe

C:\Users\Admin\AppData\Local\Temp\POJAN20217.exe
"C:\Users\Admin\AppData\Local\Temp\POJAN20217.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1336

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1336-54-0x0000000000400000-0x00000000004B6000-memory.dmp

Filesize
728KB

Download