Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 05:41

General

  • Target

    6221新.exe

  • Size

    265KB

  • MD5

    4372635f940e9263290505d9bfdcbbe4

  • SHA1

    0ae3820396a771cb8f37cc95c3834fac7068c790

  • SHA256

    c0fef0c9cda8bc2da1f0743f9700dbddd58d342383ad598e2a834b7a6f8ae0e6

  • SHA512

    43de006727d7a72e1407416261818d41003ea619c64e053c4898ef53b023a7ce11d2ba9a7b6de7ec100bad1d20c389cb65f503075205f2bb936a6f11f928e5cc

  • SSDEEP

    3072:4EbUmOnQUneuV6yez7W8cnRKdkbuCuma2A6dPnP0A8dq8JOpe37VgEoY46LgjNED:4gQea6yez7W3RSkbu1N5sPTPizoh7D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 34 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6221新.exe
    "C:\Users\Admin\AppData\Local\Temp\6221新.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\Desktop\downloaded_content.txt

          Filesize

          385KB

          MD5

          f776ad84a4472c6ac10442fb7a8f2c64

          SHA1

          b212da79bf886a42faab1d29f5b37c82758d7f52

          SHA256

          e1bf83e8460f712947b38c56340120ac2f0e94dbebd7808369e7d06d7be7f352

          SHA512

          05597385c097a824b836b6ce39db5439a6c37216476a3b661c432281a4994984285fbf2779410c814cf45c995a557b494578ca953fa3122610aece687e35c1e2

        • memory/1856-21-0x0000000002230000-0x0000000002291000-memory.dmp

          Filesize

          388KB

        • memory/1856-22-0x0000000180000000-0x00000001801E9000-memory.dmp

          Filesize

          1.9MB