Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 05:41

General

  • Target

    6221新.exe

  • Size

    265KB

  • MD5

    4372635f940e9263290505d9bfdcbbe4

  • SHA1

    0ae3820396a771cb8f37cc95c3834fac7068c790

  • SHA256

    c0fef0c9cda8bc2da1f0743f9700dbddd58d342383ad598e2a834b7a6f8ae0e6

  • SHA512

    43de006727d7a72e1407416261818d41003ea619c64e053c4898ef53b023a7ce11d2ba9a7b6de7ec100bad1d20c389cb65f503075205f2bb936a6f11f928e5cc

  • SSDEEP

    3072:4EbUmOnQUneuV6yez7W8cnRKdkbuCuma2A6dPnP0A8dq8JOpe37VgEoY46LgjNED:4gQea6yez7W3RSkbu1N5sPTPizoh7D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 34 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6221新.exe
    "C:\Users\Admin\AppData\Local\Temp\6221新.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\Desktop\downloaded_content.txt

    Filesize

    385KB

    MD5

    f776ad84a4472c6ac10442fb7a8f2c64

    SHA1

    b212da79bf886a42faab1d29f5b37c82758d7f52

    SHA256

    e1bf83e8460f712947b38c56340120ac2f0e94dbebd7808369e7d06d7be7f352

    SHA512

    05597385c097a824b836b6ce39db5439a6c37216476a3b661c432281a4994984285fbf2779410c814cf45c995a557b494578ca953fa3122610aece687e35c1e2

  • memory/1856-21-0x0000000002230000-0x0000000002291000-memory.dmp

    Filesize

    388KB

  • memory/1856-22-0x0000000180000000-0x00000001801E9000-memory.dmp

    Filesize

    1.9MB