53f4bed5eda7ace819518260828e40b981cbb3089f66e1bb1e04db424afa4dfb | Triage

Analysis

max time kernel
92s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 04:48

Sharing

Report Analysis Logs

General

Target

a0fb02b93a18f1dc4518275c7374e738.exe
Size

600KB
MD5

a0fb02b93a18f1dc4518275c7374e738
SHA1

39b0f6af4321736e1847637401af7ca71e9ce8ac
SHA256

53f4bed5eda7ace819518260828e40b981cbb3089f66e1bb1e04db424afa4dfb
SHA512

d2c036b721323a7bfadb244ab060b645f7f07c6332244f634918f8d03d317d72ea87f08984fed0f505a91fc58c783c8e4b84935502f1798ccf4b58cdf1a51d93
SSDEEP

12288:xqyzDeaqP3lcSyeLypGpuV1lTAVcqRgxznKQkp1sAV:xDP23lfxLBzX+xz2DV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5012	a0fb02b93a18f1dc4518275c7374e738.exe
5012	a0fb02b93a18f1dc4518275c7374e738.exe
5012	a0fb02b93a18f1dc4518275c7374e738.exe
5012	a0fb02b93a18f1dc4518275c7374e738.exe

C:\Users\Admin\AppData\Local\Temp\a0fb02b93a18f1dc4518275c7374e738.exe
"C:\Users\Admin\AppData\Local\Temp\a0fb02b93a18f1dc4518275c7374e738.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5012-0-0x00000000007A0000-0x00000000007A1000-memory.dmp

Filesize
4KB

Download
memory/5012-3-0x0000000000400000-0x00000000005B0000-memory.dmp

Filesize
1.7MB

Download