Resubmissions

10-06-2023 20:48

230610-zlyjpage81 8

10-06-2023 20:47

230610-zk964age8z 6

Analysis

  • max time kernel
    23s
  • max time network
    35s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    10-06-2023 20:47

General

  • Target

    zero.exe

  • Size

    398KB

  • MD5

    bd0a3c308a6d3372817a474b7c653097

  • SHA1

    5ed36132872be3d5d94627b89f15a7369f68fba1

  • SHA256

    d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa

  • SHA512

    86c53974da682c9e55a181cacc3ba19a9bfd8df488c536c175695f28f79bb586722f4d6b061aaceb9d0db91996dd0a7e288f413c7d2562fbc5b6a305f747368f

  • SSDEEP

    6144:tYcn3ge+gqzsSALff2TRLz1lTl8TFPUW+8sSZJMidVmXmVcXHU:ttQe+PzsfX2Tpz1daaWnVIgcE

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\zero.exe
    "C:\Users\Admin\AppData\Local\Temp\zero.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    PID:4112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4112-117-0x00000000005A0000-0x0000000000608000-memory.dmp

    Filesize

    416KB

  • memory/4112-118-0x000000001B4B0000-0x000000001B4F2000-memory.dmp

    Filesize

    264KB

  • memory/4112-119-0x0000000000C50000-0x0000000000C60000-memory.dmp

    Filesize

    64KB

  • memory/4112-122-0x000000001B6C0000-0x000000001B766000-memory.dmp

    Filesize

    664KB

  • memory/4112-123-0x000000001BC40000-0x000000001C10E000-memory.dmp

    Filesize

    4.8MB

  • memory/4112-124-0x000000001C220000-0x000000001C2BC000-memory.dmp

    Filesize

    624KB

  • memory/4112-125-0x000000001B3A0000-0x000000001B3A8000-memory.dmp

    Filesize

    32KB

  • memory/4112-126-0x000000001C380000-0x000000001C3CC000-memory.dmp

    Filesize

    304KB

  • memory/4112-127-0x0000000000C50000-0x0000000000C60000-memory.dmp

    Filesize

    64KB

  • memory/4112-128-0x0000000000C50000-0x0000000000C60000-memory.dmp

    Filesize

    64KB

  • memory/4112-129-0x0000000000C50000-0x0000000000C60000-memory.dmp

    Filesize

    64KB

  • memory/4112-130-0x0000000000C50000-0x0000000000C60000-memory.dmp

    Filesize

    64KB

  • memory/4112-131-0x0000000000C50000-0x0000000000C60000-memory.dmp

    Filesize

    64KB