Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-05-2024 20:28

General

  • Target

    Minitool powerdata recovery/X64/Business Technician/PowerDataRecovery.exe

  • Size

    2.4MB

  • MD5

    808db5d61d2e3b5e43b714e3bd2bab0b

  • SHA1

    5552281a64c160762558e900c4a681e702922814

  • SHA256

    89c4a6dba078aa5a219f8f2348265786178f115844f87ca9b0705e3c73246b69

  • SHA512

    d10ccc9474f77da1d0ed40667570b64a7aebd0de4c3072a376301672dde167eefc115b83518c5713a16ec5b4c6a70f3df9b73ee55583e72287f7f38d3c6d65a2

  • SSDEEP

    49152:Lh/7yMXUoxJkT/LSqA5K0+nxlrbbFvvxjhxqgu7wLg4BB+JEka+r1bmhxy/e:Lh/7yMNx2TZNDl/lvVhw3ToB+J/w7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Minitool powerdata recovery\X64\Business Technician\PowerDataRecovery.exe
    "C:\Users\Admin\AppData\Local\Temp\Minitool powerdata recovery\X64\Business Technician\PowerDataRecovery.exe"
    1⤵
      PID:2796

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2796-0-0x0000000140000000-0x00000001405B5000-memory.dmp

      Filesize

      5.7MB

    • memory/2796-1-0x0000000140000000-0x00000001405B5000-memory.dmp

      Filesize

      5.7MB