92528e479047de62b02c89b69e68f674f4a6b869921894985869ba9eb8e555d3 | Triage

Analysis

max time kernel
25s
max time network
30s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
03-07-2023 11:07

Sharing

Report Analysis Logs

General

Target

libfilezilla.exe
Size

31.9MB
MD5

a619cc2d8fb371d4d5ced4f1ea258861
SHA1

970c8a8e1357ee54131cd1eb0f53e3737d491b3b
SHA256

92528e479047de62b02c89b69e68f674f4a6b869921894985869ba9eb8e555d3
SHA512

b884adb927132a6717bae830649febb3b4969468148eb30d902df91c7b8257ab99ca873a3a3fafb16e481129ac5d93ce7d591da0ac5328685740aaba9df83a3d
SSDEEP

786432:52AVXTX5tgh10zE+7NJy9ywAFJr8gvWV4WuuhiF:52ApTX3uspNkAFJ8CWV4L8iF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

libfilezilla.exe

pid process

1056 libfilezilla.exe

C:\Users\Admin\AppData\Local\Temp\libfilezilla.exe
"C:\Users\Admin\AppData\Local\Temp\libfilezilla.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1056-54-0x0000000077C60000-0x0000000077C62000-memory.dmp

Filesize
8KB

Download
memory/1056-55-0x0000000077C60000-0x0000000077C62000-memory.dmp

Filesize
8KB

Download
memory/1056-56-0x0000000077C60000-0x0000000077C62000-memory.dmp

Filesize
8KB

Download
memory/1056-57-0x000000013F800000-0x0000000142C4A000-memory.dmp

Filesize
52.3MB

Download