d2b146c70d179627213811c0cc6a49ac01ef3cc3fd7b29f966431581071ad741 | Triage

Analysis

max time kernel
142s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 07:06

Sharing

Report Analysis Logs

General

Target

2cbd469b9d77c1afa51c0f086929660f.exe
Size

495KB
MD5

2cbd469b9d77c1afa51c0f086929660f
SHA1

29ae5ac56a67c609c9b24428a0858315b4a4c303
SHA256

d2b146c70d179627213811c0cc6a49ac01ef3cc3fd7b29f966431581071ad741
SHA512

8c0b878fe41eff03bddb0a408b72f787d8adbfe11c234fd5209706b29ab461170af452c967db4508b9190bab3984cd3ec2803fa8bcd7bf4562b684707b7e733b
SSDEEP

12288:vAhqkrnX21fFYaY6NhxDE+fhEHG2rfL72y:vAhqqX8FykhxDzpF2rf32y

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2088	2cbd469b9d77c1afa51c0f086929660f.exe
2088	2cbd469b9d77c1afa51c0f086929660f.exe
2088	2cbd469b9d77c1afa51c0f086929660f.exe

C:\Users\Admin\AppData\Local\Temp\2cbd469b9d77c1afa51c0f086929660f.exe
"C:\Users\Admin\AppData\Local\Temp\2cbd469b9d77c1afa51c0f086929660f.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2088-0-0x0000000000400000-0x00000000004E8CBC-memory.dmp

Filesize
931KB

Download
memory/2088-1-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/2088-2-0x0000000000400000-0x00000000004E8CBC-memory.dmp

Filesize
931KB

Download
memory/2088-4-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download