Resubmissions

16/11/2023, 05:31

231116-f7ya9sha6v 3

16/11/2023, 05:31

231116-f7r49aha6t 3

16/11/2023, 05:22

231116-f2jwpafg64 3

Analysis

  • max time kernel
    1661s
  • max time network
    1161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/11/2023, 05:31

General

  • Target

    e22dc4909170a6ab08366719767378332be2f0ee62a43a8e6883c37ac720aa6b.exe

  • Size

    2.4MB

  • MD5

    eec338fddd2d5fba1395358179c31f43

  • SHA1

    e9344af6c7353a7aeae032c5469dda7a5a865d3e

  • SHA256

    e22dc4909170a6ab08366719767378332be2f0ee62a43a8e6883c37ac720aa6b

  • SHA512

    0cbfe11c08217f3c46f81f360376617b0b70b0c8d53d2fda6e8a1874b28968a4a6ccfae4a549d3958ebea8b82e80fad76815e1416fbd9cbb4f61e8241506c812

  • SSDEEP

    49152:OGPXINuiBg8FsUMLMX/mH/xnJhMrqF3Ie73PpEfCTV:OVuirsUMMi/jC2ei

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e22dc4909170a6ab08366719767378332be2f0ee62a43a8e6883c37ac720aa6b.exe
    "C:\Users\Admin\AppData\Local\Temp\e22dc4909170a6ab08366719767378332be2f0ee62a43a8e6883c37ac720aa6b.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:404

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/404-12-0x0000021CE3430000-0x0000021CE3440000-memory.dmp

          Filesize

          64KB

        • memory/404-13-0x00007FFC62030000-0x00007FFC621A2000-memory.dmp

          Filesize

          1.4MB