Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-12-2023 23:33

General

  • Target

    070d41e335777ab3b16cc6279d259537.exe

  • Size

    161KB

  • MD5

    070d41e335777ab3b16cc6279d259537

  • SHA1

    5a8ab78096f21b3402a29be56bb6e51256b4e317

  • SHA256

    9d5847197dc6764bc3ef98ab27c48b41b156f64da2a26798b2f3814682ce4a4d

  • SHA512

    2d2f016ccd2a7e968e10512654fea0b35a6c6c8812f3c167335490781221e46d88b2dc6fc6b0393a29c8d21acb9f5d146438f104f65eb8868a6a18f83cd19d95

  • SSDEEP

    3072:4ZB836lFxBSzS1oG/bRrAb99o+7/Og9R/QJ1iF+XnbJQqYhf:4IyKKoGjNS99o+DOg9R/o0+XbJl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\070d41e335777ab3b16cc6279d259537.exe
    "C:\Users\Admin\AppData\Local\Temp\070d41e335777ab3b16cc6279d259537.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3700-0-0x0000000001390000-0x00000000016DA000-memory.dmp
    Filesize

    3.3MB

  • memory/3700-1-0x0000000001390000-0x00000000016DA000-memory.dmp
    Filesize

    3.3MB