5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08-04-2024 05:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95.exe
Size

6.3MB
MD5

61f68a3fe16a68260f185579bcf6d7ab
SHA1

072f761709ec6fceec17187e7caae058d3955e94
SHA256

5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95
SHA512

df0a48a4534623bf822ca367f33b541829ef118576492290057103f1a32bdf9a4e8400c9ca5c8e8e6f46cf323bf8c8ed51aaf95f16b5921fe6cf0dcbe393b207
SSDEEP

196608:FTX0QyhZKEv000yJFFY9/HBI9gVIxOsW1OLugGjlhXWkVhw3q:pe6hhI9QWVieMm3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95.exe

pid	Process
1368	5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95.exe

C:\Users\Admin\AppData\Local\Temp\5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95.exe
"C:\Users\Admin\AppData\Local\Temp\5ff913c9def6f766cfdff7c65d82a684e5dec29b65f24574c4e80c5655d0dc95.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1368-0-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/1368-3-0x0000000001260000-0x0000000001F46000-memory.dmp

Filesize
12.9MB

Download
memory/1368-2-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/1368-5-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/1368-6-0x0000000000110000-0x0000000000111000-memory.dmp

Filesize
4KB

Download
memory/1368-8-0x0000000001260000-0x0000000001F46000-memory.dmp

Filesize
12.9MB

Download
memory/1368-9-0x0000000000110000-0x0000000000111000-memory.dmp

Filesize
4KB

Download
memory/1368-16-0x0000000000120000-0x0000000000121000-memory.dmp

Filesize
4KB

Download
memory/1368-26-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/1368-31-0x0000000000150000-0x0000000000151000-memory.dmp

Filesize
4KB

Download
memory/1368-29-0x0000000000150000-0x0000000000151000-memory.dmp

Filesize
4KB

Download
memory/1368-24-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/1368-21-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/1368-19-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/1368-14-0x0000000000120000-0x0000000000121000-memory.dmp

Filesize
4KB

Download
memory/1368-11-0x0000000000110000-0x0000000000111000-memory.dmp

Filesize
4KB

Download
memory/1368-37-0x0000000001260000-0x0000000001F46000-memory.dmp

Filesize
12.9MB

Download
memory/1368-39-0x0000000001260000-0x0000000001F46000-memory.dmp

Filesize
12.9MB

Download