Overview

overview

7

Static

static

7

0e9a6a2574...a2.exe

windows7-x64

1

0e9a6a2574...a2.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    146s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 04:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0e9a6a25744a83880b31f0f3430684a2.exe

  • Size

    509KB

  • MD5

    0e9a6a25744a83880b31f0f3430684a2

  • SHA1

    283d9d9c91b289654b9da4b70f945860413fbd23

  • SHA256

    57aa98afd8d8c1bd677992d669a7f8b5adbb4021c1809e1c739eb122249c2c8b

  • SHA512

    253568d50636e3d9ba49f3f92f70f4897bab6ecad5e1471d5d4e8abc2bd9161e1c1ef9dae806e69a3d53afff58ce421812768de5644f57d6aafdb7b3a6687789

  • SSDEEP

    12288:RNNO8DV17fAsXrJ75g9TISbi2nZXI2+heD2WS+lqsWH6Z:t1R1b/XrZy9TIUl9+0DK+lqsc6Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0e9a6a25744a83880b31f0f3430684a2.exe
    "C:\Users\Admin\AppData\Local\Temp\0e9a6a25744a83880b31f0f3430684a2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3868-0-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3868-3-0x0000000000400000-0x0000000000576000-memory.dmp

    Filesize

    1.5MB

    Download