2ae03d99afe5d68299dccbc6c2c58ed19565af76ffcbf5ffb8ec81093d1ed5bc | Triage

Analysis

max time kernel
146s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
27/03/2024, 16:19

Sharing

Report Analysis Logs

General

Target

e217f5cbc8b12134e9eb3d629c4423c4.exe
Size

19KB
MD5

e217f5cbc8b12134e9eb3d629c4423c4
SHA1

e947554bac4ca9fe1180ee1094b312690931ed92
SHA256

2ae03d99afe5d68299dccbc6c2c58ed19565af76ffcbf5ffb8ec81093d1ed5bc
SHA512

4b6ad059d3449ed583f8c4f7082105b64aa61054d2718a364f21774acf3ae8d950eca4df9771918b20fa22e56d2261a0a5fca85be03f954e223a0617caee912c
SSDEEP

192:KhSTxjIKwWw9HxLAJDRRzUISiW9hHCvBYgGS:Qkw9GJDbzUIo99CvBVGS

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2932	e217f5cbc8b12134e9eb3d629c4423c4.exe
2932	e217f5cbc8b12134e9eb3d629c4423c4.exe

C:\Users\Admin\AppData\Local\Temp\e217f5cbc8b12134e9eb3d629c4423c4.exe
"C:\Users\Admin\AppData\Local\Temp\e217f5cbc8b12134e9eb3d629c4423c4.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2932-0-0x0000000002160000-0x0000000002161000-memory.dmp

Filesize
4KB

Download
memory/2932-1-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download