Resubmissions

01-04-2023 00:44

230401-a3jpeseg74 1

01-04-2023 00:40

230401-a1hpcaga91 6

Analysis

  • max time kernel
    116s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-04-2023 00:40

General

  • Target

    CMLauncher.exe

  • Size

    14.7MB

  • MD5

    bb3e00f34a96cce79549e72d1b1a439d

  • SHA1

    11b57260f75f8ac1dfa39dea6098506830baf440

  • SHA256

    463a3af1bd39ae2cd2e84286b377694a33fd740d9ed767e82569743ef184068e

  • SHA512

    4fcf526b27ff9244c56b33bf66837f65e3a6245b3f4f4537b0d8ad81cf1a3415a5a952ba70f81cb00381dbfcef7d9792bfc47e8ee2138dfea3fb874b5d1840ae

  • SSDEEP

    393216:JgukY3Ix2Rpa5W4WAot7j9P1pz3/ue5vy7vi2C1aE:TH38CAotn9P1pz3/ue5vlZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CMLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\CMLauncher.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4704
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2032

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4704-133-0x0000000000A20000-0x0000000000A21000-memory.dmp
      Filesize

      4KB

    • memory/4704-134-0x0000000003690000-0x0000000003691000-memory.dmp
      Filesize

      4KB