Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06-11-2024 06:57

General

  • Target

    3000-3-0x0000000000400000-0x000000000042F000-memory.exe

  • Size

    188KB

  • MD5

    a3fd7c1233deeaa054ed7e40be903f19

  • SHA1

    aee22effe77702fd6c6ccb82f7709aab935613bb

  • SHA256

    f7e96be2b5fafb7b34848173daae869c1e16c2aa75175e0842fa4751a4b9bb4a

  • SHA512

    2560d9a1b6581ce0bf9c422f9ab120c34864cbe99b5fdbadc42cd41e43534ac01a3a5f500832f16a4b338ce0d6e26db6397e774680a41f9185a35863fd9acfcf

  • SSDEEP

    3072:jnmWFrqmNYQGdCwVTBRVfalJH6sjp1rlPWereEJRFKz91y487B3xP:CNm+fTBfq6sjp1r9Wer9eHZ87BhP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3000-3-0x0000000000400000-0x000000000042F000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\3000-3-0x0000000000400000-0x000000000042F000-memory.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2264-0-0x00000000008D0000-0x0000000000BD3000-memory.dmp

    Filesize

    3.0MB