Overview

overview

10

Static

static

3

ceb6b3d9b2...82.exe

windows7-x64

10

ceb6b3d9b2...82.exe

windows10-2004-x64

10

$TEMP/Designation.ps1

windows7-x64

1

$TEMP/Designation.ps1

windows10-2004-x64

1

$TEMP/Prev.exe

windows7-x64

$TEMP/Prev.exe

windows10-2004-x64

Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/03/2024, 02:47

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\$TEMP\Prev.exe command="C:\Users\Admin\AppData\Local\Temp\$TEMP\Prev.exe" wdir=C:\Users\Admin\AppData\Local\Temp\$TEMP Payload error: %1 is not a valid Win32 application.
Report Analysis Logs

General

  • Target

    $TEMP/Prev.exe

  • Size

    173KB

  • MD5

    8d019b45973901b4854eec33096d05c0

  • SHA1

    1dfb37a78659ba3917c6479ead9c9f645bbb8331

  • SHA256

    d4dce3c852197709b13ad7a426d2e515d3d7d0d52d79d4b1de7f3c8e5f881ff3

  • SHA512

    9e23a4d76c707476e0c342dc6468c153571a5e1a106397d80c8ade95682119bd3bfe45ba803521327d61d926c14bcb3b61fd1869de4881956453a53183e98af1

  • SSDEEP

    3072:pPpU08BjlWTPJth26X7Sn4UfpLUNN9t68cCWlrss4M5iRq3U0Pe3vHU4Sm:LQBk7JjX74cN0lrztgwU0Wym

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads