db5273410c933a199d6cde35b970ba18de85f4194870fdfa9ccdead249ecae3b | Triage

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/02/2023, 18:56 UTC

Sharing

Report Analysis Logs

General

Target

decrypter_2.exe
Size

52KB
MD5

db7855fd2277b2dbae476f01cf1f37f8
SHA1

ca00fed8a05bb6cee985bcc0759adf4bff1440b8
SHA256

b2cf520dda130d475659131de6713cf87167a48dfb5597df5e2bbd608a2c8690
SHA512

fa89c016eacbd349c754b7bfca1fd885395c8eae7e8157479fee7c9e9f648b435756a5219be679da195b4d6ae0c3b83de80569137fc6f3a533e49b7755346647
SSDEEP

768:k5XumZxpL0il0rv/V02NoizUZ/GhlecXSpc9XWuwrm7GGu9:aX7jdLl0zVN/zUZ/Ghl1vzJ7I9

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\decrypter_2.exe
"C:\Users\Admin\AppData\Local\Temp\decrypter_2.exe"
1⤵
PID:4972

Network

DNS

15.89.54.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

15.89.54.20.in-addr.arpa

IN PTR

Response
DNS

d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

Remote address:

8.8.8.8:53

Request

d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

IN PTR

Response

52.109.77.2:443

40 B
1
93.184.220.29:80

322 B
7
93.184.221.240:80

322 B
7
93.184.221.240:80

322 B
7
93.184.221.240:80

322 B
7
104.80.225.205:443

322 B
7
93.184.221.240:80

260 B
5
93.184.221.240:80

322 B
7

8.8.8.8:53

15.89.54.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

15.89.54.20.in-addr.arpa
8.8.8.8:53

d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

dns

118 B
204 B
1
1

DNS Request

d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4972-132-0x00000000752B0000-0x0000000075861000-memory.dmp

Filesize
5.7MB

Download
memory/4972-133-0x00000000752B0000-0x0000000075861000-memory.dmp

Filesize
5.7MB

Download