Analysis

  • max time kernel
    91s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-11-2022 06:13

General

  • Target

    d292fa2cca6d3b1f33679a647d291ac29a960b10b11f69d843ac6e4d015673e3.exe

  • Size

    115KB

  • MD5

    0aa16bd525d5c7dbcd8587cd66c77f5c

  • SHA1

    7cb9168aa7fa30e9790d93a67432f2687d3cc43d

  • SHA256

    d292fa2cca6d3b1f33679a647d291ac29a960b10b11f69d843ac6e4d015673e3

  • SHA512

    603fc9f7e37c620514d5b5d9395a4e0e2399963ad2de68b4153beea595f659780984beeaa1bbad30ca3c1d06dbdab2ead054f5cd42d6978de389288fde8dd0ef

  • SSDEEP

    3072:m8uMCcRVyvA6slxC5aDREd0GsQTlD5l8So6DBW4GrNI4xO:mTMCU/6CZqdhTXuSzDB5ixO

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\d292fa2cca6d3b1f33679a647d291ac29a960b10b11f69d843ac6e4d015673e3.exe
    "C:\Users\Admin\AppData\Local\Temp\d292fa2cca6d3b1f33679a647d291ac29a960b10b11f69d843ac6e4d015673e3.exe"
    1⤵
      PID:4584

    Network

    • flag-us
      DNS
      97.97.242.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      97.97.242.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
      IN PTR
      Response
    • 52.178.17.2:443
      322 B
      7
    • 52.109.76.31:443
      322 B
      7
    • 8.8.8.8:53
      97.97.242.52.in-addr.arpa
      dns
      71 B
      145 B
      1
      1

      DNS Request

      97.97.242.52.in-addr.arpa

    • 8.8.8.8:53
      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
      dns
      118 B
      204 B
      1
      1

      DNS Request

      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4584-132-0x0000000000400000-0x0000000000433000-memory.dmp

      Filesize

      204KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.