Analysis

  • max time kernel
    28s
  • max time network
    32s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    17-04-2023 09:08

General

  • Target

    5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exe

  • Size

    164KB

  • MD5

    890a58f200dfff23165df9e1b088e58f

  • SHA1

    74e3d82f7ee81109e150dc41112cf95b3a4b5307

  • SHA256

    5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93

  • SHA512

    2ee3636833cd9b02f5e311401817b15514845d4c12c1416d7e345845f8084775bf8c5f8f32822066b75a6b627a93138a0b27deb99c8bbb1f8d640132a2d8de0d

  • SSDEEP

    3072:Hp5SexkWi1Lbi4eTMlwDCnu/q2GB96W/y:JvGWwbnWJ/yB9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exe
    "C:\Users\Admin\AppData\Local\Temp\5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2032-54-0x0000000000170000-0x000000000017A000-memory.dmp
    Filesize

    40KB

  • memory/2032-55-0x0000000000B90000-0x0000000000C59000-memory.dmp
    Filesize

    804KB

  • memory/2032-56-0x00000000020B0000-0x000000000214F000-memory.dmp
    Filesize

    636KB

  • memory/2032-57-0x00000000022F0000-0x000000000241D000-memory.dmp
    Filesize

    1.2MB

  • memory/2032-58-0x00000000001E0000-0x00000000001FF000-memory.dmp
    Filesize

    124KB

  • memory/2032-59-0x00000000026F0000-0x00000000027F9000-memory.dmp
    Filesize

    1.0MB

  • memory/2032-60-0x00000000001B0000-0x00000000001B6000-memory.dmp
    Filesize

    24KB

  • memory/2032-62-0x0000000000190000-0x0000000000191000-memory.dmp
    Filesize

    4KB

  • memory/2032-61-0x0000000000180000-0x0000000000181000-memory.dmp
    Filesize

    4KB

  • memory/2032-63-0x00000000001A0000-0x00000000001A1000-memory.dmp
    Filesize

    4KB

  • memory/2032-64-0x00000000001B0000-0x00000000001B6000-memory.dmp
    Filesize

    24KB

  • memory/2032-65-0x00000000001B0000-0x00000000001B6000-memory.dmp
    Filesize

    24KB