f85d0e5a44227717ee495b09ea81b79af918c4c29308c449c706a4990559817e | Triage

Analysis

max time kernel
49s
max time network
116s
platform
windows10_x64
resource
win10v20210410
submitted
12/07/2021, 11:59

Sharing

Report Analysis Logs

General

Target

WannaMad.exe
Size

199KB
MD5

09168c3e6157dd9b4350aa1bd308cb63
SHA1

fb4554adb294d2d9ed402a53e7beb67edb703391
SHA256

f85d0e5a44227717ee495b09ea81b79af918c4c29308c449c706a4990559817e
SHA512

9457e2324c7f99d1f5be12ce458c9266e663d2981528395c498ae64cf81c906c25b9f2ac4b9c8b9dda8788cf763a2edacac0b0e7fe728867240eb84882e5db6e

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\WannaMad.exe
"C:\Users\Admin\AppData\Local\Temp\WannaMad.exe"
1⤵
PID:1892

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1892-114-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download
memory/1892-116-0x0000000004C40000-0x0000000004C41000-memory.dmp

Filesize
4KB

Download
memory/1892-117-0x00000000051E0000-0x00000000051E1000-memory.dmp

Filesize
4KB

Download
memory/1892-118-0x0000000004CE0000-0x0000000004CE1000-memory.dmp

Filesize
4KB

Download
memory/1892-119-0x0000000004B80000-0x0000000004B81000-memory.dmp

Filesize
4KB

Download
memory/1892-120-0x0000000004EF0000-0x0000000004EF1000-memory.dmp

Filesize
4KB

Download
memory/1892-121-0x0000000004CE0000-0x00000000051DE000-memory.dmp

Filesize
5.0MB

Download
memory/1892-122-0x0000000004CE0000-0x00000000051DE000-memory.dmp

Filesize
5.0MB

Download