Analysis
-
max time kernel
40s -
max time network
39s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
08-06-2023 12:54
Behavioral task
behavioral1
Sample
Flasher.exe
Resource
win7-20230220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Flasher.exe
Resource
win10v2004-20230221-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
Flasher.exe
-
Size
246KB
-
MD5
9254ca1da9ff8ad492ca5fa06ca181c6
-
SHA1
70fa62e6232eae52467d29cf1c1dacb8a7aeab90
-
SHA256
30676ad5dc94c3fec3d77d87439b2bf0a1aaa7f01900b68002a06f11caee9ce6
-
SHA512
a84fbbdea4e743f3e41878b9cf6db219778f1479aa478100718af9fc8d7620fc7a3295507e11df39c7863cb896f946514e50368db480796b6603c8de5580685a
-
SSDEEP
6144:/85Z+Y97t0Kc0Nd5bHzvvj/R87Z3BxonZ:/8vd2KxNPjs3gZ
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Flasher.exe"C:\Users\Admin\AppData\Local\Temp\Flasher.exe"1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Users\Admin\AppData\Local\Temp\Flasher.exe"C:\Users\Admin\AppData\Local\Temp\Flasher.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\Flasher.exe"C:\Users\Admin\AppData\Local\Temp\Flasher.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\Flasher.exe"C:\Users\Admin\AppData\Local\Temp\Flasher.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\Flasher.exe"C:\Users\Admin\AppData\Local\Temp\Flasher.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1292-137-0x00000000021E0000-0x00000000021E1000-memory.dmpFilesize
4KB
-
memory/1292-142-0x0000000000400000-0x00000000004A4000-memory.dmpFilesize
656KB
-
memory/2148-133-0x0000000002330000-0x0000000002331000-memory.dmpFilesize
4KB
-
memory/2148-134-0x0000000000400000-0x00000000004A4000-memory.dmpFilesize
656KB
-
memory/3068-139-0x00000000020E0000-0x00000000020E1000-memory.dmpFilesize
4KB
-
memory/4776-140-0x00000000020F0000-0x00000000020F1000-memory.dmpFilesize
4KB
-
memory/4808-136-0x0000000000640000-0x0000000000641000-memory.dmpFilesize
4KB
-
memory/4808-141-0x0000000000400000-0x00000000004A4000-memory.dmpFilesize
656KB