7bcce65d6166d096b69e5cd5e4a1e6a3991ff77aed3495da1af2b4f9ecbeef93 | Triage

Analysis

max time kernel
312s
max time network
373s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
09/02/2023, 14:42 UTC

Sharing

Report Analysis Logs

General

Target

PO 732001_pdf.exe
Size

710KB
MD5

16518717490a9378b8ce9e4398c22bba
SHA1

94199ea9d1227a495d09fc77a63088d25829b022
SHA256

7bcce65d6166d096b69e5cd5e4a1e6a3991ff77aed3495da1af2b4f9ecbeef93
SHA512

c9d94d712ee5039ac8833140fe5e107d87aa12644a411429d21dccf1b18d61fa6c727b04f3238050c18501df20afafdcddf81c554f8e13ac1ce9fdcdbce86522
SSDEEP

12288:/UNSgr0oFGV/nMA1uSx8AevTsff0a8Gt3w8sqz4XRKyghCS09QPi/4mJoHpqf2wt:/UtwfTo1f7wCtxzfJGY

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\PO 732001_pdf.exe
"C:\Users\Admin\AppData\Local\Temp\PO 732001_pdf.exe"
1⤵
PID:4124

Network

DNS

226.101.242.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.101.242.52.in-addr.arpa

IN PTR

Response
DNS

6.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.3.0.4.0.0.3.0.1.3.0.6.2.ip6.arpa

Remote address:

8.8.8.8:53

Request

6.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.3.0.4.0.0.3.0.1.3.0.6.2.ip6.arpa

IN PTR

Response

209.197.3.8:80

322 B
7
20.189.173.12:443

322 B
7
87.248.202.1:80

322 B
7
104.80.225.205:443

322 B
7

8.8.8.8:53

226.101.242.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

226.101.242.52.in-addr.arpa
8.8.8.8:53

6.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.3.0.4.0.0.3.0.1.3.0.6.2.ip6.arpa

dns

118 B
204 B
1
1

DNS Request

6.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.3.0.4.0.0.3.0.1.3.0.6.2.ip6.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4124-132-0x0000000000690000-0x0000000000748000-memory.dmp

Filesize
736KB

Download