Analysis
- max time kernel
120s - max time network
121s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
- submitted
04/04/2024, 09:16
General
- Target 61f68a3fe16a68260f185579bcf6d7ab.exe
- Size 6.3MB
- Sample240404-k8ggcsbb7s
- SHA256 5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\61f68a3fe16a68260f185579bcf6d7ab.exe"C:\Users\Admin\AppData\Local\Temp\61f68a3fe16a68260f185579bcf6d7ab.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2040-0-0x0000000000110000-0x0000000000111000-memory.dmp
memory/2040-2-0x0000000000F40000-0x0000000001C26000-memory.dmp
memory/2040-3-0x0000000000110000-0x0000000000111000-memory.dmp
memory/2040-5-0x0000000000110000-0x0000000000111000-memory.dmp
memory/2040-6-0x0000000000170000-0x0000000000171000-memory.dmp
memory/2040-10-0x0000000000170000-0x0000000000171000-memory.dmp
memory/2040-8-0x0000000000170000-0x0000000000171000-memory.dmp
memory/2040-13-0x0000000000180000-0x0000000000181000-memory.dmp
memory/2040-15-0x0000000000180000-0x0000000000181000-memory.dmp
memory/2040-18-0x0000000000190000-0x0000000000191000-memory.dmp
memory/2040-20-0x0000000000190000-0x0000000000191000-memory.dmp
memory/2040-28-0x00000000001B0000-0x00000000001B1000-memory.dmp
memory/2040-25-0x00000000001A0000-0x00000000001A1000-memory.dmp
memory/2040-30-0x00000000001B0000-0x00000000001B1000-memory.dmp
memory/2040-23-0x00000000001A0000-0x00000000001A1000-memory.dmp
memory/2040-36-0x0000000000F40000-0x0000000001C26000-memory.dmp
memory/2040-38-0x0000000000F40000-0x0000000001C26000-memory.dmp