Overview

overview

10

Static

static

10

6c5db6dce1...3e.exe

windows7_x64

10

6c5db6dce1...3e.exe

windows10_x64

10

DusBrowserInst.exe

windows7_x64

6

DusBrowserInst.exe

windows10_x64

6

IDWCH2.exe

windows7_x64

8

IDWCH2.exe

windows10_x64

8

Litever01.exe

windows7_x64

10

Litever01.exe

windows10_x64

10

NAN.exe

windows7_x64

10

NAN.exe

windows10_x64

10

anyname.exe

windows7_x64

10

anyname.exe

windows10_x64

10

app.exe

windows7_x64

10

app.exe

windows10_x64

10

askinstall50.exe

windows7_x64

10

askinstall50.exe

windows10_x64

10

farlab_setup.exe

windows7_x64

10

farlab_setup.exe

windows10_x64

10

inst002.exe

windows7_x64

1

inst002.exe

windows10_x64

1

jamesnew.exe

windows7_x64

3

jamesnew.exe

windows10_x64

3

justdezine.exe

windows7_x64

10

justdezine.exe

windows10_x64

10

md3_3kvm.exe

windows7_x64

7

md3_3kvm.exe

windows10_x64

7

mixseven.exe

windows7_x64

9

mixseven.exe

windows10_x64

10

redcloud.exe

windows7_x64

1

redcloud.exe

windows10_x64

1

udptest.exe

windows7_x64

10

udptest.exe

windows10_x64

10

Analysis

  • max time kernel
    143s
  • max time network
    197s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    24-09-2021 18:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    redcloud.exe

  • Size

    173KB

  • MD5

    16bf4653dfc06b85e7d34cb5cfe62717

  • SHA1

    35ca16cdb661f6978815efc8c8a2ae0fbddcb733

  • SHA256

    6038860aefedc84fdafe7d693ea6fa63147be5e3a43dd96e20adf377811c5d30

  • SHA512

    0717f23056515b18f627496c309c22bfc76da5b61f2730a320fa8584ad0fb5ed47a8695ad255bc8635cdd379d2313cb141466e86ae0b639c33772fe2177fa35f

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\redcloud.exe
    "C:\Users\Admin\AppData\Local\Temp\redcloud.exe"
    1⤵
      PID:520

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/520-59-0x0000000000A10000-0x0000000000A11000-memory.dmp

      Filesize

      4KB

      Download

    • memory/520-61-0x0000000004BF0000-0x0000000004BF1000-memory.dmp

      Filesize

      4KB

      Download