Overview

overview

10

Static

static

3

74f75c14b9...3e.exe

windows7-x64

1

74f75c14b9...3e.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    74f75c14b95bb67375199a61a861623e.exe

  • Size

    200KB

  • MD5

    74f75c14b95bb67375199a61a861623e

  • SHA1

    2f36a4de064dac3b4ce365db7501fccd3680cf1e

  • SHA256

    12d1fc95264c141fd2eaf32c0277631e868002fd443deb40eafe43dfc874f875

  • SHA512

    980a0a8c55ad64de6b510cb69a60e489efd31a32e564ede48505a8c90233fd83f7f86fb5289dc1601b1d6fed7afe828a6e3c4d55737ad70c8f8c4b2f4f318d5d

  • SSDEEP

    3072:8HJEPV9CNVgBY3zw4BvmSe3FgB7RRJmJKE1MYQofxqIJxyPqFHG2hnWZMzyz6Z:8GPV9CDgCzDCFG7XJmJlNx71FRnW56Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\74f75c14b95bb67375199a61a861623e.exe
    "C:\Users\Admin\AppData\Local\Temp\74f75c14b95bb67375199a61a861623e.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    PID:1404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1404-0-0x0000000000220000-0x0000000000221000-memory.dmp
    Filesize

    4KB

    Download
  • memory/1404-1-0x0000000000400000-0x0000000000476000-memory.dmp
    Filesize

    472KB

    Download
  • memory/1404-3-0x0000000000220000-0x0000000000221000-memory.dmp
    Filesize

    4KB

    Download