4edcc8dd34321f79f44df3794831dbc556bd2efab121c3a32667c4c865133cbe | Triage

Analysis

max time kernel
112s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
10/10/2022, 23:52 UTC

Sharing

Report Analysis Logs

General

Target

4edcc8dd34321f79f44df3794831dbc556bd2efab121c3a32667c4c865133cbe.exe
Size

307KB
MD5

66db055f4a80285ee9c4aa50c9c66e21
SHA1

73dd717aa6a6de5ff19956b5170f174d099c1e7e
SHA256

4edcc8dd34321f79f44df3794831dbc556bd2efab121c3a32667c4c865133cbe
SHA512

c059c503aa082af518edda0635c094942bfaa1ab70346324bfa86d6f558d29a91fab0535625c49c128e9c4166c20b71d822a03aefa071a9ce8acb605132cc909
SSDEEP

6144:abctZTiCDxiDGtcEu+8UFpX1dM7PF4qaa7Q6hoJj7qUQR/oUwro5wWyZWJkNLY5:abcbeCDxzOW5Q7aDJyDJH51ykaNA

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\4edcc8dd34321f79f44df3794831dbc556bd2efab121c3a32667c4c865133cbe.exe
"C:\Users\Admin\AppData\Local\Temp\4edcc8dd34321f79f44df3794831dbc556bd2efab121c3a32667c4c865133cbe.exe"
1⤵
PID:4692

Network

DNS

176.122.125.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

176.122.125.40.in-addr.arpa

IN PTR

Response

20.123.141.233:443

40 B
1
209.197.3.8:80

46 B
40 B
1
1
20.189.173.5:443

322 B
7
8.253.208.120:80

322 B
7
8.253.208.120:80

322 B
7
8.253.208.120:80

322 B
7

8.8.8.8:53

176.122.125.40.in-addr.arpa

dns

73 B
159 B
1
1

DNS Request

176.122.125.40.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4692-132-0x0000000001000000-0x0000000001026000-memory.dmp

Filesize
152KB

Download