0e3ddc4add4de93951bc64ac614f5e616d46a9d23d9d9aa56aa27b0e31c073b6 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
07-08-2024 08:55

Sharing

Report Analysis Logs

General

Target

SG9uZXlwb3Q.exe
Size

1.9MB
MD5

840a437a3f0fd4ffc7e640fd50112fb3
SHA1

b8df93d4ad036fdd203d55c56c2224ca4a53c187
SHA256

0e3ddc4add4de93951bc64ac614f5e616d46a9d23d9d9aa56aa27b0e31c073b6
SHA512

01d5c6a41c4f1c7880e6552afa865dc60fe8873b579f2e84146fe22dbeb1d2ab6550d02cb014c5a8b45f22f3370a4d76f4bf60aee16866f642c6cdcba965fd72
SSDEEP

24576:m5lYe0j3Z6o2GEr8RgE9QRhAmnjtVLFFAVWtOwjV3SFDFnN65qsyHiPOMXB8sN/V:vEoTgYyU1zaCXDXFWGebMYcG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

SG9uZXlwb3Q.exe

pid	process
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe
1640	SG9uZXlwb3Q.exe

C:\Users\Admin\AppData\Local\Temp\SG9uZXlwb3Q.exe
"C:\Users\Admin\AppData\Local\Temp\SG9uZXlwb3Q.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads