Overview

overview

1

Static

static

decryptor.exe

windows7-x64

1

decryptor.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    126s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/09/2022, 16:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    decryptor.exe

  • Size

    148KB

  • MD5

    57298a9c73ed6a49890c009387c8ce83

  • SHA1

    11ce65fc845d4fde3b1887ad319421e26cb91c2a

  • SHA256

    77792cce3c2bc5deee8cfca3dfa4ccce1d176f48e40f6204072f7767067bbac2

  • SHA512

    d92ef2063d6b0f2e933867c2b613cd868fb8b5c1633d8ef83296eede36af031d58f40cde69b9a83b2bb4a0bedc3cc217aa36d6afe5fe8351d9e43be5a302244e

  • SSDEEP

    1536:5wq7HRLG5VhRo3sQrCflFluE4OdFYp2/OWqZ5:5wCyhWcQOBYOfYpyOWq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\decryptor.exe
    "C:\Users\Admin\AppData\Local\Temp\decryptor.exe"
    1⤵
      PID:804
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:840
      • C:\Users\Admin\AppData\Local\Temp\decryptor.exe
        "C:\Users\Admin\AppData\Local\Temp\decryptor.exe"
        1⤵
          PID:2260

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/804-132-0x0000000000B80000-0x0000000000BBB000-memory.dmp

          Filesize

          236KB

          Download

        • memory/2260-133-0x0000000000B80000-0x0000000000BBB000-memory.dmp

          Filesize

          236KB

          Download