be7241a74fe9a9d30e0631e41533a362b21c8f7aae3e5b6ad319cc15c024ec3f

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
10-06-2023 14:59

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\tasklist.exe command="C:\Users\Admin\AppData\Local\Temp\tasklist.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

tasklist.exe
Size

104KB
MD5

d0a49a170e13d7f6aebbefed9df88aaa
SHA1

d61ffd641c2f6d45dadc26c02daeea8dabee8204
SHA256

be7241a74fe9a9d30e0631e41533a362b21c8f7aae3e5b6ad319cc15c024ec3f
SHA512

8fab3a6ed410c44e05f5cf13ad732be00a1d72db9a35124d385e1d7e3b081377b98b91715269bd858d3044d413dc7527e103c882a9bed9637f2b46f3247af9a9
SSDEEP

1536:yUI3KbhXflnknXNMT8ujZAJfLfkx4thxGU2Izjr5wiQ5PJAuhEaHxZGC:K3G9npXWDfkx4thxGiH5wdEaHxD

Score

1^/10

Malware Config

Signatures

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
2040	tasklist.exe

C:\Users\Admin\AppData\Local\Temp\tasklist.exe
"C:\Users\Admin\AppData\Local\Temp\tasklist.exe"
1⤵
- Enumerates processes with tasklist
PID:2040

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads