fa48507eb4f9892094909d331ab2711452c6779321c88f2c2212cb4108ddea89 | Triage

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 07:21 UTC

Sharing

Report Analysis Logs

General

Target

fa48507eb4f9892094909d331ab2711452c6779321c88f2c2212cb4108ddea89.exe
Size

149KB
MD5

68e11508700d7696dd8f0f2d262902b0
SHA1

03ac4a13f675669792ba46313433d18e37d57a9b
SHA256

fa48507eb4f9892094909d331ab2711452c6779321c88f2c2212cb4108ddea89
SHA512

337ce492f286d7eccabfe4a3f1db249bf6e3d65de136eb102f187951ad46e3bda7c24e8648960e656d3d8e4d520736bc02d60747c72a0f2a877764580647edfa
SSDEEP

1536:ALxyBdh+78HSdjJFPXsMdTiFvyHA0zjFVxPAf0OttrOx6rs9AKCYuawPrmxJbIlw:ANyn8ASdjJtXsFSAC2cizs9AK8aw6xoG

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\fa48507eb4f9892094909d331ab2711452c6779321c88f2c2212cb4108ddea89.exe
"C:\Users\Admin\AppData\Local\Temp\fa48507eb4f9892094909d331ab2711452c6779321c88f2c2212cb4108ddea89.exe"
1⤵
PID:2444

Network

DNS

96.108.152.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

96.108.152.52.in-addr.arpa

IN PTR

Response

20.42.72.131:443

322 B
7
20.54.89.15:443

260 B
5
67.24.25.254:80

322 B
7
67.24.25.254:80

322 B
7
67.24.25.254:80

322 B
7

8.8.8.8:53

96.108.152.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

96.108.152.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2444-132-0x0000000000EE0000-0x0000000000F12000-memory.dmp

Filesize
200KB

Download
memory/2444-133-0x0000000000EE0000-0x0000000000F12000-memory.dmp

Filesize
200KB

Download