Analysis
-
max time kernel
93s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 11:55
General
-
Target
offset dumper.exe
-
Size
39KB
-
MD5
5286adba078b25e687e86243404ae253
-
SHA1
f798d63703b976dc295bbe87d5d1f4e81291921b
-
SHA256
a34198942e754d5e1438bb1cdbae42012616c4f9cc179e2cef3ce07e758e3d85
-
SHA512
94a14d346129f79355f8a25e17b32a26bf142c8e3f0f5a5bf814bc0b6e7772bc3d20bf255921f1695766aacd0ca800a1b1d540b681660744be0c98951a59a0ac
-
SSDEEP
384:XY32eqi3U4lcgTo+AZWdhLpVzVufqwC+0Gwnbsic4TPmDMoD2ScbNuF9sBwI79l9:wZX2RL7XuLpJdnxRc4Ar8CiMdnltO3M
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\offset dumper.exe"C:\Users\Admin\AppData\Local\Temp\offset dumper.exe"1⤵
- Suspicious behavior: EnumeratesProcesses