Analysis

  • max time kernel
    100s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-08-2023 12:22

General

  • Target

    d1bde35f664008063945176cf250e7a464699d04d46f0370903817357839adce.exe

  • Size

    834KB

  • MD5

    f79368cfb40a7c293b1bee0817ab1e7a

  • SHA1

    ed64afc7820ce4deb6f9898547c2c3cba78765bc

  • SHA256

    d1bde35f664008063945176cf250e7a464699d04d46f0370903817357839adce

  • SHA512

    0bf56c56e2542dd16143b5065138d5f0c1df445c1a123c7950633c021508f07a4fa58fd6a96e6071d52dd5b250a46d2160eee85744ea8dd63bd2e9be61f889d4

  • SSDEEP

    6144:bNY0I7prcxsrI0wbyGuhPG7Y9fsT+F2Mv2ov1VIMeX:bNY0Iux+UyGWPb9fsg2AVIMeX

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\d1bde35f664008063945176cf250e7a464699d04d46f0370903817357839adce.exe
    "C:\Users\Admin\AppData\Local\Temp\d1bde35f664008063945176cf250e7a464699d04d46f0370903817357839adce.exe"
    1⤵
      PID:3344
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
      1⤵
        PID:2828

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3344-133-0x00007FF643FE0000-0x00007FF644063000-memory.dmp

        Filesize

        524KB