Analysis

  • max time kernel
    151s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 03:14

General

  • Target

    twII13+10trfixed.exe

  • Size

    1.1MB

  • MD5

    bda4adccd90739bd8487ecd76e2f51e0

  • SHA1

    b99d34f8b5891e1bd0816cb24c24e75c4eb38cce

  • SHA256

    74fb230efaa38170b4fe28b7bff4fce92921a8b85e0a2d46ae462b47107fba55

  • SHA512

    9de6772555e39bf971ac8e7f90b55fbabe251dbcc1ae409eca30ae9f12b59ab838ce8c3a777a57311438c9fbd923a507e73b7cc0b30cb74fbfb01e32a7486933

  • SSDEEP

    24576:caVNKByc58gxlWhYYBdU/D5HkieQ3wdp/v2KSgS0GCA/3To4WJ6N6Z:cavExWFHiGielDv2DgS0GxboR6c

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\twII13+10trfixed.exe
    "C:\Users\Admin\AppData\Local\Temp\twII13+10trfixed.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1724-0-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-1-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-2-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-11-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/1724-12-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-10-0x000000007EFA0000-0x000000007EFA1000-memory.dmp

    Filesize

    4KB

  • memory/1724-13-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-9-0x0000000000760000-0x00000000007AB000-memory.dmp

    Filesize

    300KB

  • memory/1724-8-0x00000000007F0000-0x00000000007F7000-memory.dmp

    Filesize

    28KB

  • memory/1724-7-0x0000000000900000-0x0000000000903000-memory.dmp

    Filesize

    12KB

  • memory/1724-15-0x00000000039F0000-0x0000000003C81000-memory.dmp

    Filesize

    2.6MB

  • memory/1724-19-0x00000000039F0000-0x0000000003C81000-memory.dmp

    Filesize

    2.6MB

  • memory/1724-20-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-22-0x00000000007D0000-0x00000000007DE000-memory.dmp

    Filesize

    56KB

  • memory/1724-21-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-23-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/1724-24-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-34-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB

  • memory/1724-48-0x0000000000400000-0x000000000074FA38-memory.dmp

    Filesize

    3.3MB