db1de8a7407d2c63c71e96085d1f52bffd8db45beb5500333e9fbe5434ad3cae | Triage

Analysis

max time kernel
121s
max time network
153s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
10-01-2024 12:48

Sharing

Report Analysis Logs

General

Target

stager.exe
Size

965KB
MD5

528182768aa1bd3fa9493ad43aa031c3
SHA1

40e36425cbae0dfa0c9851f1a18a1899f625ed30
SHA256

db1de8a7407d2c63c71e96085d1f52bffd8db45beb5500333e9fbe5434ad3cae
SHA512

e6251280fde8b8a0ef83811ab8c2ae8a99d53d3b3f192c7e331d7d86fab9e9974ee3f54bf1541ca018f8662d4e5a4b6e3c7b024dfadb4cc67d0ab85c93f3c749
SSDEEP

12288:QWsoMmEJ20MDsmRCDvL2nE/lS/MxSMZGlsok7XYZnxpyFmruMI4oV:d4mEJWDWDvL2nE/lS/M7SxpyYuM

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2744	stager.exe

C:\Users\Admin\AppData\Local\Temp\stager.exe
"C:\Users\Admin\AppData\Local\Temp\stager.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2744-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2744-17-0x000000013F960000-0x000000013FA57000-memory.dmp

Filesize
988KB

Download