Analysis
- max time kernel
150s - max time network
119s - platform
windows7_x64 - resource
win7-20240215-en - resource tags
- submitted
02/03/2024, 23:24
General
- Target MicrosoftWindowsServicesEtc/NotMuch.exe
- Size 122KB
- Sample240302-3d17dsag33
- SHA256 cf830a2d66d3ffe51341de9e62c939b2bb68583afbc926ddc7818c3a71e80ebb
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\MicrosoftWindowsServicesEtc\NotMuch.exe"C:\Users\Admin\AppData\Local\Temp\MicrosoftWindowsServicesEtc\NotMuch.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1636-0-0x00000000012E0000-0x0000000001304000-memory.dmp
memory/1636-1-0x00000000744B0000-0x0000000074B9E000-memory.dmp
memory/1636-2-0x0000000004B90000-0x0000000004BD0000-memory.dmp
memory/1636-3-0x0000000004B90000-0x0000000004BD0000-memory.dmp
memory/1636-4-0x0000000004B90000-0x0000000004BD0000-memory.dmp
memory/1636-5-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-6-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-7-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-8-0x00000000744B0000-0x0000000074B9E000-memory.dmp
memory/1636-10-0x0000000004B90000-0x0000000004BD0000-memory.dmp
memory/1636-9-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-11-0x0000000004B90000-0x0000000004BD0000-memory.dmp
memory/1636-12-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-13-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-14-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-15-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-16-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-17-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-18-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-19-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-20-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-21-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-22-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-23-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-24-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-25-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-26-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-27-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-28-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-29-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-30-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-31-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-32-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-33-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-34-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-35-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-36-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-37-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-38-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-39-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-40-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-41-0x000000000E430000-0x000000000E530000-memory.dmp
memory/1636-42-0x000000000E430000-0x000000000E530000-memory.dmp