Analysis
- max time kernel
93s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
28/02/2024, 07:23
General
- Target ab5416ee6e2e9af33b0808552292edec.exe
- Size 56KB
- Sample240228-h71shaec29
- SHA256 dba9158633c04420f22c13438d51921ce63221acfb4570152a23f401acb4a8bb
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\ab5416ee6e2e9af33b0808552292edec.exe"C:\Users\Admin\AppData\Local\Temp\ab5416ee6e2e9af33b0808552292edec.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3472-3-0x000000007FFF0000-0x000000007FFF7000-memory.dmp
memory/3472-4-0x000000007FFD0000-0x000000007FFD1000-memory.dmp
memory/4480-0-0x0000000000400000-0x0000000000409200-memory.dmp
memory/4480-1-0x0000000010000000-0x0000000010013000-memory.dmp
memory/4480-7-0x0000000000400000-0x0000000000409200-memory.dmp
memory/4480-8-0x0000000010000000-0x0000000010013000-memory.dmp