374dd8672a3919f435f63044f95bce848e0ce75066143af84e25aa918b72b2e0 | Triage

Analysis

max time kernel
111s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 12:37

Sharing

Report Analysis Logs

General

Target

4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
Size

159KB
MD5

4bc63cfbb56fc19a028684bb4e9b8ed0
SHA1

da4a99b85c740cae80f447a0446fdc362607ccce
SHA256

374dd8672a3919f435f63044f95bce848e0ce75066143af84e25aa918b72b2e0
SHA512

15523460b3d4213b4150e01405b4d01847c057e1d015f8f3d76ba4c5c0bf5c098165fbdf1ec09dfe0c3a733c6cbff76e6b260b55ed5e931d26795364eecd5642
SSDEEP

3072:xd4gQDMrV8yC/x/09/LZqSS2UERugAL6zlW2:PPTC/xM3qSSptgMkW2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
3096	4bc63cfbb56fc19a028684bb4e9b8ed0N.exe

C:\Users\Admin\AppData\Local\Temp\4bc63cfbb56fc19a028684bb4e9b8ed0N.exe
"C:\Users\Admin\AppData\Local\Temp\4bc63cfbb56fc19a028684bb4e9b8ed0N.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3096-0-0x0000000000020000-0x0000000000029000-memory.dmp

Filesize
36KB

Download
memory/3096-1-0x00007FFEF5D90000-0x00007FFEF5DA0000-memory.dmp

Filesize
64KB

Download
memory/3096-2-0x0000000140000000-0x000000014002F000-memory.dmp

Filesize
188KB

Download
memory/3096-10-0x00007FFEF5D90000-0x00007FFEF5DA0000-memory.dmp

Filesize
64KB

Download