46604cb79716d7402b03cf68c6aa353d1c560d750bc82a1b4d549309a4d58ff4 | Triage

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 01:08

Sharing

Report Analysis Logs

General

Target

Email-Worm/Magistr.exe
Size

107KB
MD5

9890349fe3c68f5923b29347bba021a4
SHA1

fa080a50486b205b75833a6b5c9505abb1e3b4df
SHA256

068f2ee28af7645dbf2a1684f0a5fc5ccb6aa1027f71da4468e0cba56c65e058
SHA512

aedd86837987cbe8c0b1cf3b4ca0c3a875e4cc9bcc8097c160d0d6070427ad9e1d871d5339ea95cc03499c39a6536b5a6b6d43372a49eeaf2e87bf755a3d3367
SSDEEP

3072:pRr1m0iQwTlFiIoXTLDCLLUsgULFsfMGdd64:Lk0LCwIi3DMUwFNGd04

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

Magistr.exe

pid process

2368 Magistr.exe
2368 Magistr.exe

C:\Users\Admin\AppData\Local\Temp\Email-Worm\Magistr.exe
"C:\Users\Admin\AppData\Local\Temp\Email-Worm\Magistr.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2368-0-0x0000000000400000-0x00000000004204EC-memory.dmp

Filesize
129KB

Download
memory/2368-1-0x0000000000400000-0x00000000004204EC-memory.dmp

Filesize
129KB

Download