Analysis

  • max time kernel
    141s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-06-2023 10:35

General

  • Target

    Malware-database-main/Christmas.exe

  • Size

    482KB

  • MD5

    c35aa97962c4132ef87768d6e7e4faea

  • SHA1

    bb696ec7709f94067bc0cea5d53432f7f60667e3

  • SHA256

    cb7c01aa6b8d1f7fa7131d6444a220cedf0c51102c127a13a4313e4249b1f88e

  • SHA512

    21d838c035b958f1e92aef0c6591d9631215f088bd96653a9d15b4293fdaab2d1b404c0f0e38f14eba3d69099dc07fc5191caa89f49aba956674e7f9b461450c

  • SSDEEP

    6144:s68WiSoFDCIIH9rTmoSoaTxxsVW9rmdA1h3UeJsFtusIP3q7bNB+Xrge138ahLWk:CWiSoF2dN0KcPJsJ0ObNB+rKaVW+Is9

Score
6/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Malware-database-main\Christmas.exe
    "C:\Users\Admin\AppData\Local\Temp\Malware-database-main\Christmas.exe"
    1⤵
    • Adds Run key to start application
    PID:4548

Network

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4548-133-0x0000000000750000-0x0000000000751000-memory.dmp
    Filesize

    4KB

  • memory/4548-134-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-135-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-136-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-137-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-138-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-139-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-140-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-141-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-142-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-143-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-144-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-145-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-146-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB

  • memory/4548-147-0x0000000000400000-0x0000000000480000-memory.dmp
    Filesize

    512KB