Analysis

  • max time kernel
    3s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-11-2023 16:09

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2016-645-0x0000000000C50000-0x0000000000C8E000-memory.exe command="C:\Users\Admin\AppData\Local\Temp\2016-645-0x0000000000C50000-0x0000000000C8E000-memory.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

General

  • Target

    2016-645-0x0000000000C50000-0x0000000000C8E000-memory.exe

  • Size

    248KB

  • MD5

    e148f9e351bcc373c085b55d5c355a1d

  • SHA1

    3e95b9d3395e979069d43af51fbc8b53bb1679af

  • SHA256

    a164b3576b179f83d6f2745fad16faec33f3a1831bea9be99fea208dd630a802

  • SHA512

    9ad04bbebb5e54ff7bc8f12fc7a2a80948b142f511d130e46f3b356a73663beb6193031e065d8bd5a4cb406ff17adb61d106ab6b8d7736a8567556201c3fb7fb

  • SSDEEP

    3072:gVyymrtnYNgctkfHrUkFTQmX1DJVt/qqfb2/fluHdOLh:UyymJYNgctwLU21/Rb2/fY9O

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads