Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-08-2024 14:15

General

  • Target

    c42a9cb36701ccae5adc83130156b0869c9965d52965afd3753a0c900884080a.exe

  • Size

    7.1MB

  • MD5

    0ade52b0c2ad5ca468f335dd2288177e

  • SHA1

    34eaaaeb40c9a4e3b54395ecf72540492f5ed75a

  • SHA256

    c42a9cb36701ccae5adc83130156b0869c9965d52965afd3753a0c900884080a

  • SHA512

    a2ddc21aeacef53c85f68b2a9b8e73260a119470c1bbdb20cfcc3a172488f2b896158886704a152462354d1e39f390433d2e5dfd7104fd5630bbe07ca96df751

  • SSDEEP

    49152:szrYf9cCN287cVhX0tSU8S/W/c986Zw+j2vK7fW9MeTcNP/ftM0O/3yqqr0omctz:sydWvgBdtE/31qQoVtQGlTeo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c42a9cb36701ccae5adc83130156b0869c9965d52965afd3753a0c900884080a.exe
    "C:\Users\Admin\AppData\Local\Temp\c42a9cb36701ccae5adc83130156b0869c9965d52965afd3753a0c900884080a.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\40051cda

    Filesize

    1.2MB

    MD5

    7b1a117d77e4fb3713463849712261ff

    SHA1

    ec3cd9db4c238e5175f9bbb628e71750aae0f78e

    SHA256

    b74f77302a11b471a410e90e2877f54db33ff76224871f4e7fa419a8ad7493b1

    SHA512

    144af8fc813363d2d5dc98cd4f0117adcc4a8604317848de3760280f059fc87f064cd3bddbebe6f552cc4adfe881541ac4cf307028fe8c9c4e32991d3b7d5798

  • memory/4968-0-0x00007FF8C5DB0000-0x00007FF8C5FA5000-memory.dmp

    Filesize

    2.0MB

  • memory/4968-1-0x0000000000400000-0x0000000000B4B000-memory.dmp

    Filesize

    7.3MB

  • memory/4968-7-0x00007FF8BD330000-0x00007FF8BD34C000-memory.dmp

    Filesize

    112KB

  • memory/4968-10-0x00007FF8C5DB0000-0x00007FF8C5FA5000-memory.dmp

    Filesize

    2.0MB