Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 20:17

General

  • Target

    8a6f52698187c619a78be3e59839c20b.exe

  • Size

    4.0MB

  • MD5

    8a6f52698187c619a78be3e59839c20b

  • SHA1

    d9fea3edccb355b08fd12f88aba4262cc7c305d1

  • SHA256

    463b94f648c40e5635709f3218506e3a539a565400ce9ed1a1d97a4c1fa307b9

  • SHA512

    e4dedc260ac0196d0a5b4dce4c7a350da593bf5fa50baa4cfc5dd82fed0517717c85000b2f2f64bd233f1d8ceded0cbd94cff7b84db2ea45f07c0dc85741012d

  • SSDEEP

    98304:Cf4rrBaqJIMNAsN7cEkoHzIXb5N6sDkPGfnWp7n8caRY:84hkknpPTyN62kuWpY1Y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8a6f52698187c619a78be3e59839c20b.exe
    "C:\Users\Admin\AppData\Local\Temp\8a6f52698187c619a78be3e59839c20b.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2520-0-0x0000000000400000-0x000000000162E000-memory.dmp

          Filesize

          18.2MB

        • memory/2520-1-0x00000000035D0000-0x00000000035D1000-memory.dmp

          Filesize

          4KB

        • memory/2520-2-0x00000000030C0000-0x00000000031D0000-memory.dmp

          Filesize

          1.1MB

        • memory/2520-4-0x0000000000400000-0x000000000162E000-memory.dmp

          Filesize

          18.2MB

        • memory/2520-6-0x00000000035D0000-0x00000000035D1000-memory.dmp

          Filesize

          4KB