Overview

overview

7

Static

static

7

12dcd49e22...0N.exe

windows7-x64

7

12dcd49e22...0N.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    103s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-08-2024 02:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    12dcd49e22caf9bda7ec64df429f37b0N.exe

  • Size

    1.9MB

  • MD5

    12dcd49e22caf9bda7ec64df429f37b0

  • SHA1

    2bd9e40808a91d34e0021c7c1f112eb1c95d8b41

  • SHA256

    0d2a0556f2de44606689a479fcc8943f0d0b9aab62402d6bbf709a2aa01092d0

  • SHA512

    a7ccd87b1724c00ecaa0be7c50a3fe8c94f5667a35360363c4b2bbe54f1a9877ec68f3064f87a40b6806c45a58f3646766016ee66d6946f80babe91fc48af6ec

  • SSDEEP

    12288:2Wh2hbLbDJ8EysgSSVP5oDpqH2T6jIvzGqsyLCfOpQWpphnC0slLC6JCUhifWpF6:uiJr7Lv5D91zOk4OE

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Processes

  • C:\Users\Admin\AppData\Local\Temp\12dcd49e22caf9bda7ec64df429f37b0N.exe
    "C:\Users\Admin\AppData\Local\Temp\12dcd49e22caf9bda7ec64df429f37b0N.exe"
    1⤵
      PID:2636

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2636-0-0x00007FFC8FB63000-0x00007FFC8FB65000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2636-1-0x00000283CFF50000-0x00000283D0130000-memory.dmp

      Filesize

      1.9MB

      Download