Analysis
-
max time kernel
149s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 09:08
Static task
static1
Behavioral task
behavioral1
Sample
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe
-
Size
2.2MB
-
MD5
6e01faa944c9c4a7021ba650d4b53f22
-
SHA1
e0936a701d701d955e5da7c0ccdbcc053392bcc1
-
SHA256
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5
-
SHA512
f88f82ae6be3587815b69efdab7c070075fb208a55e27287ce8e94d3bde6bdda4c15e6b72c44e07cecbc781b676f3b4ce235cf3abaee2fe73ae9da2cda7f9bdf
-
SSDEEP
49152:Cnt56xeCL1PND9XbHDqlLh+WqLizVT/MTL+z0XMd8h+Tqo70TRrNPolf13:CqxeCRPNDJbelLh+WqLiZQL+z0XMd8F2
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe 2052 7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\ProgramData\Zshield\debuglog\DWMRecover\7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.log
Filesize6KB
MD556df7cb2d2c8d64a3c369539ba09f743
SHA1d7bd5f3b4dd63c3ecab202dd9ed8710ff0e2ac09
SHA256164b1f1a9be90d3b7fb5aec78cdc75f697000eb18451e2cd20dc5e5d29c50856
SHA5122a5df07243b65575122c3fab3254e765dca39b5d90b6b881943e7e3067da5515587c1f6f29ac87edc1067214e95473bfd2f655a6ef5b018ab0630a920e6c1e04