d51b7294cc83f1b78ed24992fa74fe20599427fbf65fb20a01b85a3acb31bc40 | Triage

Analysis

max time kernel
1561s
max time network
1565s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27-01-2024 12:54

Sharing

Report Analysis Logs

General

Target

amped.nfo
Size

4KB
MD5

5a7c0ff818fdef7993d6c3c051d0d025
SHA1

ab77018d6925d66c4e9e126be445ef912540924c
SHA256

895a56626a19d478409dc854a87be4f1fa1e4d5c02420a9a61be58df90de07ee
SHA512

1107c70383420c7a92b28054ad9a6aad53d5d019cb1e50461a56ce6907f34c2e37bbb9f36a43228df79785b935a8115f63073b36d9335addd11823e24c9d92c2
SSDEEP

48:xG6fjX7BEpXoviLR6N8SOiMF0LDRgTQcm+kywXcO5sYh1m/:xNX7BEmWR6WSOiMWLtji7O3m/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1888	msinfo32.exe

C:\Windows\system32\msinfo32.exe
C:\Windows\system32\msinfo32.exe "C:\Users\Admin\AppData\Local\Temp\amped.nfo"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads