Analysis

  • max time kernel
    143s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-08-2023 22:43

General

  • Target

    wfilmorav12302341-zmco.exe

  • Size

    21.3MB

  • MD5

    a639a2dc429cd3a67714b77fe41e2bd5

  • SHA1

    a4caf31a934e0bcc5ef18f28be6629b7d0a2ba6c

  • SHA256

    874b4ebc5e0a19a943ccb68776dad911731c2f34606fffd7c861f7c4a304e64b

  • SHA512

    b198481e3949fe1b3ea4bd9f29141f6744f4aaf4ff6f7abd2fea5935b2c38738333c6eed2b5b028b308d979b5b3c305fdd4a626a114ddbd96fc018db9a9fb3b1

  • SSDEEP

    393216:imwfdzbYPePzWsOaEsX7SFRFy5/cUyPfhMGEIGwwGZymnE0Q71kihihjGzkrBd:/adzboeP7ORjFR45kUMfrEIvwdZ71khf

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\wfilmorav12302341-zmco.exe
    "C:\Users\Admin\AppData\Local\Temp\wfilmorav12302341-zmco.exe"
    1⤵
      PID:5068

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5068-133-0x0000000000400000-0x0000000001ADA000-memory.dmp

      Filesize

      22.9MB

    • memory/5068-135-0x0000000003880000-0x0000000003881000-memory.dmp

      Filesize

      4KB

    • memory/5068-134-0x00000000038C0000-0x0000000003920000-memory.dmp

      Filesize

      384KB

    • memory/5068-136-0x0000000003940000-0x0000000003941000-memory.dmp

      Filesize

      4KB

    • memory/5068-138-0x0000000003960000-0x0000000003961000-memory.dmp

      Filesize

      4KB

    • memory/5068-137-0x0000000003860000-0x0000000003861000-memory.dmp

      Filesize

      4KB

    • memory/5068-139-0x00000000038B0000-0x00000000038B1000-memory.dmp

      Filesize

      4KB

    • memory/5068-140-0x0000000003950000-0x0000000003951000-memory.dmp

      Filesize

      4KB

    • memory/5068-141-0x0000000000400000-0x0000000001ADA000-memory.dmp

      Filesize

      22.9MB

    • memory/5068-142-0x0000000003930000-0x0000000003931000-memory.dmp

      Filesize

      4KB

    • memory/5068-143-0x00000000039A0000-0x00000000039A1000-memory.dmp

      Filesize

      4KB

    • memory/5068-144-0x0000000003990000-0x0000000003991000-memory.dmp

      Filesize

      4KB

    • memory/5068-146-0x00000000039C0000-0x00000000039C1000-memory.dmp

      Filesize

      4KB

    • memory/5068-145-0x0000000003B00000-0x0000000003B01000-memory.dmp

      Filesize

      4KB

    • memory/5068-147-0x0000000003980000-0x0000000003981000-memory.dmp

      Filesize

      4KB

    • memory/5068-148-0x0000000003B10000-0x0000000003B11000-memory.dmp

      Filesize

      4KB

    • memory/5068-150-0x0000000003B50000-0x0000000003B51000-memory.dmp

      Filesize

      4KB

    • memory/5068-151-0x0000000003B40000-0x0000000003B41000-memory.dmp

      Filesize

      4KB

    • memory/5068-149-0x0000000003B60000-0x0000000003B61000-memory.dmp

      Filesize

      4KB

    • memory/5068-152-0x0000000003B80000-0x0000000003B81000-memory.dmp

      Filesize

      4KB

    • memory/5068-153-0x00000000039B0000-0x00000000039B1000-memory.dmp

      Filesize

      4KB

    • memory/5068-154-0x0000000000400000-0x0000000001ADA000-memory.dmp

      Filesize

      22.9MB

    • memory/5068-155-0x00000000038C0000-0x0000000003920000-memory.dmp

      Filesize

      384KB