Analysis

  • max time kernel
    90s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/09/2024, 16:14

General

  • Target

    新建文件夹/sfwget.exe

  • Size

    3.7MB

  • MD5

    ea8ee16588b1750a84e85d5d9e86750d

  • SHA1

    c8df50c5cd93c3fd8c6aba99fdf9cd7c93e44918

  • SHA256

    dfdbabfde6981bc003587ab7cc372c211ebf59c10264e475a784b4d17182ff08

  • SHA512

    2300a7ed83faa96a6410aeb16413431071a42cafac75e611284dc41f12a3971fead2c14398c76af9caa943bf98241cdb5118f2ca1211005aa75898f6d293975f

  • SSDEEP

    98304:WbPk5HyUN8k5h/wDdEoNiV4I/hwAf1wAoTamiDAMgS:WbPk5HyC8k5h/wDdEoNiV4I/WWwA7mFS

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\新建文件夹\sfwget.exe
    "C:\Users\Admin\AppData\Local\Temp\新建文件夹\sfwget.exe"
    1⤵
      PID:3012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3012-1-0x0000000000401000-0x00000000006CA000-memory.dmp

      Filesize

      2.8MB

    • memory/3012-0-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB

    • memory/3012-2-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB