ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 11:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb.exe
Size

2.0MB
MD5

7bffe1347660987a8095649aa627a96e
SHA1

e2f18de25a16dc263f465a85063444f8624485cb
SHA256

ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb
SHA512

8d16674fa9ffff8d73510a731aec013ecb8dd26dec19244133a9ef15f4ed48525653036191538949ba1384f32e1bc8135aa7e60de9bbd582d93b3b40a7ec166c
SSDEEP

49152:OOU2gIjlSX/DeJ0rFaChfmeqCWYo+aG1wEWEYQsMGmsUOWik+J:jHWDfwupEaaG1wEWEYQsMP1+J

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1684	ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb.exe
1684	ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb.exe

C:\Users\Admin\AppData\Local\Temp\ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb.exe
"C:\Users\Admin\AppData\Local\Temp\ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1684
- C:\Windows\system32\cmd.exe
  /c erase /f "C:\Users\Admin\AppData\Local\Temp\ea576acd751e0349e7e886bab93b0cf5aeb659ceef386b2a8cb5f8b5c2a100eb.exe" >> NUL
  2⤵
  PID:4196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1684-1-0x0000000000B30000-0x0000000000D2F000-memory.dmp

Filesize
2.0MB

Download
memory/1684-2-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-5-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-6-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-7-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-8-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-9-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-12-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-13-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-19-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-17-0x000000000165E000-0x000000000165F000-memory.dmp

Filesize
4KB

Download
memory/1684-21-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-22-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-24-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-29-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-31-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-30-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-37-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-38-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-39-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-43-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-44-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-48-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-49-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-54-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-56-0x0000000001340000-0x0000000001440000-memory.dmp

Filesize
1024KB

Download
memory/1684-55-0x0000000000B30000-0x0000000000D2F000-memory.dmp

Filesize
2.0MB

Download