Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 14:53

General

  • Target

    770c7688ff649d1ec58edb654b221517.exe

  • Size

    315KB

  • MD5

    770c7688ff649d1ec58edb654b221517

  • SHA1

    e2f0cfec8644a85bd708bae1db17a2f05fc81e9e

  • SHA256

    6d65df9056370e5216a0dd34e5ea92ae1a1adab0703861292c25339cb5a176df

  • SHA512

    f105fca2b1899717807732124e1ff8d63bf30ba9fc8ce64169c2ff762c6a49f2357c8c37d7655d3343255fb6e9456ba65d24a4304b04e43cc2f636d01ce94038

  • SSDEEP

    6144:qXDXL0BvnjbJDB7VHMkzQB9qnxc4O/3Rn:0b0BPjb37ykeuxc48

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\770c7688ff649d1ec58edb654b221517.exe
    "C:\Users\Admin\AppData\Local\Temp\770c7688ff649d1ec58edb654b221517.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2432-2-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2432-1-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/2432-0-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB

  • memory/2432-5-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB

  • memory/2432-7-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/2432-8-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2432-9-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB

  • memory/2432-10-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB