Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250410-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250410-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/04/2025, 10:40

Errors

Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2872-12-0x0000000000400000-0x0000000000426000-memory.exe command="C:\Users\Admin\AppData\Local\Temp\2872-12-0x0000000000400000-0x0000000000426000-memory.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

General

  • Target

    2872-12-0x0000000000400000-0x0000000000426000-memory.exe

  • Size

    152KB

  • MD5

    6b84795472ea1fe19b2dadbca32a8804

  • SHA1

    fa6da73415e4fb4465d09b88fb615f5b3041a7a1

  • SHA256

    0ac7a3b1f91970004e2c3c370ca86a3b82a9ca15bdb0488edaf78544720b450c

  • SHA512

    10e932574dea4b2bba73d167fd958bc0e1a386b854eec805e54906cdc751440fcbe5cbc123951994238680c4f60bfb5d683d3a015e12e750cda2fc147fbb6430

  • SSDEEP

    3072:ldPUfInudJfyhI2AYab5SsLnwvxdqgbY:0fgJAYabkzb

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads