Analysis

  • max time kernel
    181s
  • max time network
    185s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-12-2022 12:14

General

  • Target

    d6ac7cc362adb9944386d160dc1f91688efe2f61da97a680389a4755b4434003.exe

  • Size

    600KB

  • MD5

    251340182dfc1cb8ae46eb79857e9935

  • SHA1

    af0d40dee120dbe44578caf800029192c9558bfe

  • SHA256

    d6ac7cc362adb9944386d160dc1f91688efe2f61da97a680389a4755b4434003

  • SHA512

    4af1038dad5edfebce885b6285cac87550d379dd53d092ce5e4cfd04f50e97c2d533ade23449cb67a556fae44467b7011a88b5d5a01f7ef54576ce41f3267803

  • SSDEEP

    12288:n9nimN/DQnIrvzTCmGknZBrxXHhz92lLpXR3PHBSQGLxe0DhF+cRX:n9nie/knmz31BYdXR3PhSfx7DhFd

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\d6ac7cc362adb9944386d160dc1f91688efe2f61da97a680389a4755b4434003.exe
    "C:\Users\Admin\AppData\Local\Temp\d6ac7cc362adb9944386d160dc1f91688efe2f61da97a680389a4755b4434003.exe"
    1⤵
      PID:2188

    Network

    • flag-unknown
      DNS
      151.122.125.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      151.122.125.40.in-addr.arpa
      IN PTR
      Response
    • 20.50.73.10:443
      322 B
      7
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 8.8.8.8:53
      151.122.125.40.in-addr.arpa
      dns
      73 B
      159 B
      1
      1

      DNS Request

      151.122.125.40.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2188-132-0x0000000000400000-0x00000000004AB000-memory.dmp

      Filesize

      684KB

    • memory/2188-133-0x0000000000A50000-0x0000000000BF0000-memory.dmp

      Filesize

      1.6MB

    • memory/2188-134-0x0000000000400000-0x00000000004AB000-memory.dmp

      Filesize

      684KB

    • memory/2188-135-0x0000000000A50000-0x0000000000BF0000-memory.dmp

      Filesize

      1.6MB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.