Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15-09-2023 16:07

General

  • Target

    file.exe

  • Size

    690KB

  • MD5

    2f212322c6b6d7db7250d0c282271925

  • SHA1

    01676375932ea61ffb5128c244c0ecc7cb335a01

  • SHA256

    3073eaf746e904b1e653992e78f7c5f95b3f9ad0989e4611412b038348c1afa1

  • SHA512

    2dc544c11d9fb985b915d4af5ec2025468c6ca112c2301f161fd81577b24bdc28b2bf0e81979a7e4048e70ed8216fcac35cb055fd81b5b341e48c5ef8f2e446f

  • SSDEEP

    12288:fbQzY60Ph4KVUgwaLCObCT6IgbcNZH8DIxLjnnW2ijA1:fbOxgwKCHWEZH8wvSjO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
      PID:1932

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1932-0-0x00000000009D0000-0x0000000000A80000-memory.dmp

      Filesize

      704KB

    • memory/1932-1-0x000007FEF5260000-0x000007FEF5C4C000-memory.dmp

      Filesize

      9.9MB

    • memory/1932-2-0x000000001AEC0000-0x000000001AF40000-memory.dmp

      Filesize

      512KB

    • memory/1932-3-0x0000000000450000-0x0000000000458000-memory.dmp

      Filesize

      32KB

    • memory/1932-4-0x0000000000460000-0x000000000047A000-memory.dmp

      Filesize

      104KB

    • memory/1932-5-0x0000000000600000-0x0000000000606000-memory.dmp

      Filesize

      24KB

    • memory/1932-6-0x0000000001E80000-0x0000000001F08000-memory.dmp

      Filesize

      544KB

    • memory/1932-8-0x000007FEF5260000-0x000007FEF5C4C000-memory.dmp

      Filesize

      9.9MB