Analysis

  • max time kernel
    144s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/03/2023, 04:47

General

  • Target

    logon.exe

  • Size

    408KB

  • MD5

    5b64620d1d135fdff59e4e02f3c4b709

  • SHA1

    1d11a59f401f589473670c394ef715ee5ac96c91

  • SHA256

    db35f7e2815e272dfac9624c0f41f0a0f6d634b0735615b11387ac9bc8be5064

  • SHA512

    050a7bdefc66bdf2bab4c6f144d25a20a2fd0ab7aef70c1612db08c43edb5cde5ffc33f83a6d80cd02bc95517577fdf8e3add9f9074e5103736c90d8fa1ef053

  • SSDEEP

    6144:V3xQgqQ6obq2vSc9m3KJvcCZew4j9U8YYFAmgt/pUXLR3x2X+RoULBbcu:rQgLJFqc9mv9NYcAmgMXloyoULH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\logon.exe
    "C:\Users\Admin\AppData\Local\Temp\logon.exe"
    1⤵
      PID:1192

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Roaming\.logon\login.log

      Filesize

      432B

      MD5

      9ee56c77a396fe43f79badc628a0e405

      SHA1

      7826ecd0abd0b91470ba156eb56284f1c805d6c1

      SHA256

      7b43d8e986da86ae80e99c48d7a8558157955e4fdbd3ec8450075994902f7ce0

      SHA512

      cd21fe77fd71ff554fb05aa42218a354eb14fc3a8310f6f5c1154424ff9756b7d4955d710dcc847f4f20acb31882ec37643cab12ff88653e7055432230e3cfd1

    • C:\Users\Admin\AppData\Roaming\.logon\login.log

      Filesize

      1KB

      MD5

      01ef6ea8e082b2abb88a4ea9c40e6d3f

      SHA1

      712731e5b76932d2310ad349a1f3b96dbef664cf

      SHA256

      b7544d34899649a580921defa6800c212373aefcd05f86e451fc8c1f42f3096d

      SHA512

      9002c86605e28f8168f509c0735e531667434bdc9f4cce8f8f43e91b3cb3ef6e417a6d2a005d1263d186505b218effa12060a073db3f69b686047f31b1317213