Overview

overview

10

Static

static

10

6c5db6dce1...3e.exe

windows7_x64

10

6c5db6dce1...3e.exe

windows10_x64

10

DusBrowserInst.exe

windows7_x64

6

DusBrowserInst.exe

windows10_x64

6

IDWCH2.exe

windows7_x64

8

IDWCH2.exe

windows10_x64

8

Litever01.exe

windows7_x64

10

Litever01.exe

windows10_x64

10

NAN.exe

windows7_x64

10

NAN.exe

windows10_x64

10

anyname.exe

windows7_x64

10

anyname.exe

windows10_x64

10

app.exe

windows7_x64

10

app.exe

windows10_x64

10

askinstall50.exe

windows7_x64

10

askinstall50.exe

windows10_x64

10

farlab_setup.exe

windows7_x64

10

farlab_setup.exe

windows10_x64

10

inst002.exe

windows7_x64

1

inst002.exe

windows10_x64

1

jamesnew.exe

windows7_x64

3

jamesnew.exe

windows10_x64

3

justdezine.exe

windows7_x64

10

justdezine.exe

windows10_x64

10

md3_3kvm.exe

windows7_x64

7

md3_3kvm.exe

windows10_x64

7

mixseven.exe

windows7_x64

9

mixseven.exe

windows10_x64

10

redcloud.exe

windows7_x64

1

redcloud.exe

windows10_x64

1

udptest.exe

windows7_x64

10

udptest.exe

windows10_x64

10

Analysis

  • max time kernel
    141s
  • max time network
    95s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    24-09-2021 18:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    inst002.exe

  • Size

    265KB

  • MD5

    f38f3aab5af6435226dcca8751f61e6c

  • SHA1

    e555e536dca72784f73422a216aa35206441444a

  • SHA256

    94590b6681e3f9255a27b41a356d0334460ed596daab947258110a4ab94708db

  • SHA512

    0402a9d77388348aa055ab58a3211222ffdbe043e73052e075d861d1d0888437cfdeb2c2d7676b23e539b573bd4a4180d4e5f8af840693823979997f99c76c09

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\inst002.exe
    "C:\Users\Admin\AppData\Local\Temp\inst002.exe"
    1⤵
      PID:804

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/804-114-0x0000000000DB0000-0x0000000000DC0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/804-115-0x0000000001280000-0x0000000001292000-memory.dmp

      Filesize

      72KB

      Download