Analysis
- max time kernel
123s - max time network
126s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
19/03/2024, 09:46
General
- Target 0330042.exe
- Size 302KB
- Sample240319-lrrfnsgf47
- SHA256 4d625b4783af22d7e421ad6ef1596a0fef18ab7636776c93212201add00df162
Score
7/10
Malware Config
Signatures
- Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0330042.exe"C:\Users\Admin\AppData\Local\Temp\0330042.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1620-1-0x0000000074AF0000-0x00000000752A0000-memory.dmp
memory/1620-0-0x0000000000710000-0x0000000000760000-memory.dmp
memory/1620-2-0x00000000050D0000-0x00000000050E0000-memory.dmp
memory/1620-3-0x0000000004FD0000-0x0000000004FF2000-memory.dmp
memory/1620-9-0x0000000074AF0000-0x00000000752A0000-memory.dmp
memory/1620-10-0x00000000050D0000-0x00000000050E0000-memory.dmp