Analysis
-
max time kernel
28s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
17-04-2023 09:08
Behavioral task
behavioral1
Sample
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exe
Resource
win10v2004-20230220-en
General
-
Target
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exe
-
Size
164KB
-
MD5
890a58f200dfff23165df9e1b088e58f
-
SHA1
74e3d82f7ee81109e150dc41112cf95b3a4b5307
-
SHA256
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93
-
SHA512
2ee3636833cd9b02f5e311401817b15514845d4c12c1416d7e345845f8084775bf8c5f8f32822066b75a6b627a93138a0b27deb99c8bbb1f8d640132a2d8de0d
-
SSDEEP
3072:Hp5SexkWi1Lbi4eTMlwDCnu/q2GB96W/y:JvGWwbnWJ/yB9
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exepid process 2032 5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2032-54-0x0000000000170000-0x000000000017A000-memory.dmpFilesize
40KB
-
memory/2032-55-0x0000000000B90000-0x0000000000C59000-memory.dmpFilesize
804KB
-
memory/2032-56-0x00000000020B0000-0x000000000214F000-memory.dmpFilesize
636KB
-
memory/2032-57-0x00000000022F0000-0x000000000241D000-memory.dmpFilesize
1.2MB
-
memory/2032-58-0x00000000001E0000-0x00000000001FF000-memory.dmpFilesize
124KB
-
memory/2032-59-0x00000000026F0000-0x00000000027F9000-memory.dmpFilesize
1.0MB
-
memory/2032-60-0x00000000001B0000-0x00000000001B6000-memory.dmpFilesize
24KB
-
memory/2032-62-0x0000000000190000-0x0000000000191000-memory.dmpFilesize
4KB
-
memory/2032-61-0x0000000000180000-0x0000000000181000-memory.dmpFilesize
4KB
-
memory/2032-63-0x00000000001A0000-0x00000000001A1000-memory.dmpFilesize
4KB
-
memory/2032-64-0x00000000001B0000-0x00000000001B6000-memory.dmpFilesize
24KB
-
memory/2032-65-0x00000000001B0000-0x00000000001B6000-memory.dmpFilesize
24KB