Overview

overview

8

Static

static

3

Install_0007.exe

windows7-x64

8

Install_0007.exe

windows10-2004-x64

1

Resubmissions

12/01/2024, 05:54

240112-gl9mvafgep 8

12/01/2024, 05:48

240112-ghxtwaffbm 8

Analysis

  • max time kernel
    1s
  • max time network
    11s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/01/2024, 05:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Install_0007.exe

  • Size

    31.8MB

  • MD5

    70c8852301ccccd2f56d33801d8f3b35

  • SHA1

    5ef8f07364aed4d8eed395967bcf9371a00e02e1

  • SHA256

    1bf09c9be57c97e86edd4653f67007599bc4c0a414e71b2535e63170a2c4966e

  • SHA512

    5ea7467f2cedee41a5166864be9ee0aa795f9671136fcc8a083c954e7f3915087b2a2f34817147af66647632964459d297fdc6fb17b7be47004a419dd032b2ec

  • SSDEEP

    393216:vQIk+HbEIT6cbhz7897ewrqrFl8EOIVtYI6ISdAUF90YUEHDnWs9U+npr5ZaZJu5:vQRQbhns7e3rnxtE1XXNvxqLF7W

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Install_0007.exe
    "C:\Users\Admin\AppData\Local\Temp\Install_0007.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1128
    • C:\Program Files (x86)\EnchantedLawyerzonApplication\EnchantedyApplication.exe
      "C:\Program Files (x86)\EnchantedLawyerzonApplication\EnchantedyApplication.exe"
      2⤵
        PID:1228

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Program Files (x86)\EnchantedLawyerzonApplication\EnchantedyApplication.exe
            Filesize

            92KB

            MD5

            cdd98b3ff02667a828e6a0ecc1509f23

            SHA1

            29fd563788af616a5378b7dc217ecb35686e221c

            SHA256

            93e1d3677729abebfd519f56b9054cb7826841ad3816ad6d25cc6b9d881c5b25

            SHA512

            54ba70e097cb57dd7886c4c42e1d3ffead40cd3cfd14c26d77530d2bbccfe80ba9eb7c281e528959f301193e3bf640497a471f31971d0812fb71fdcb7cab3113

            Download Submit

          • memory/1128-0-0x0000000010000000-0x000000001008D000-memory.dmp

            Filesize

            564KB

            Download