Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
09/05/2024, 07:16
General
-
Target
Eve/eve.exe
-
Size
73KB
-
MD5
755d1b440f76791ef1d58d7ebb098068
-
SHA1
27f540010a6fbbdae390dce806499bcb0c096c51
-
SHA256
0fa0ee9d5c8416b622cc6a09d8dcff69d3f14ed8738a380fad3c27879b804354
-
SHA512
2ddc9341270f7bce951b2349e2a5168f6f2947c3568f134ad57b935f98090db4a2d318be94650dc8d42965d19232346e01bc19c90445b742c8c659d4e2e561a3
-
SSDEEP
1536:4Oc9V+aRuSIY2UahOI7DkcS1pUkbahMdALcURn31P46jVlBdt2qP:4Oc9kDSIY2UtI7A91pUkbahMqQUJC6vh
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Eve\eve.exe"C:\Users\Admin\AppData\Local\Temp\Eve\eve.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\splwow64.exeC:\Windows\splwow64.exe 122882⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB