5c74246442ac631912e43437b3297ca715d093b34ff25587174e686476e7faaa | Triage

Analysis

max time kernel
138s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2022, 20:39 UTC

Sharing

Report Analysis Logs

General

Target

5c74246442ac631912e43437b3297ca715d093b34ff25587174e686476e7faaa.exe
Size

89KB
MD5

76d68b36f212a54564c328810599c26c
SHA1

c60ed453432c9d1390cc550744e24946bb1215b6
SHA256

5c74246442ac631912e43437b3297ca715d093b34ff25587174e686476e7faaa
SHA512

43efe2925a784b3f72cadbe8cd77e37d9f3f4ab13dd6903350411b3137a55a48cc811c4e895cb30820dd4ec8c009cebf357c9315569eeecb1a0f43c2116107e7
SSDEEP

1536:zfL26MARux8jbP/U9LKLfsxGY3dffsF9/uPPkmwWnglfe3V43dZTAQ3EXENl:zDyARE6dwxGAdsD/uPPkmwWnglfbvUXO

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\5c74246442ac631912e43437b3297ca715d093b34ff25587174e686476e7faaa.exe
"C:\Users\Admin\AppData\Local\Temp\5c74246442ac631912e43437b3297ca715d093b34ff25587174e686476e7faaa.exe"
1⤵
PID:2564

Network

DNS

97.97.242.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.97.242.52.in-addr.arpa

IN PTR

Response
DNS

14.110.152.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.110.152.52.in-addr.arpa

IN PTR

Response

67.24.171.254:80

138 B
120 B
3
3
104.46.162.226:443

322 B
7
20.224.151.203:443

40 B
1
67.24.171.254:80

322 B
7
67.24.171.254:80

322 B
7
67.24.171.254:80

322 B
7

8.8.8.8:53

97.97.242.52.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

97.97.242.52.in-addr.arpa
8.8.8.8:53

14.110.152.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

14.110.152.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2564-132-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download