Overview

overview

5

Static

static

3

nanodump_p...86.exe

windows7-x64

1

nanodump_p...86.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    150s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/07/2023, 12:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    nanodump_ppl_dump.x86.exe

  • Size

    135KB

  • MD5

    414c0a64ae5a06e4b0e3d4caddbb09d2

  • SHA1

    ab62e8d4ea32086c22ffa39db341cc453af16fe9

  • SHA256

    f8a549fd58b410dda97a91dd1f285efc3d9cff406e1d49ea98c2d7f092caed2a

  • SHA512

    5d60b313e130634bd19342e250c8e8ade8a7127a3c53c950f1d956a8c48aeffd4d8ee93a77f47a8bf355de26cdbf260e6363e0405169a1b5d128b4c7585ebea2

  • SSDEEP

    1536:rzwzlVbiMWAMedXyrZ0VYqgQoln7oZmkwLOsZ4tea/PE6bqB:WXMXV0a3QA7oZml4y6w

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\nanodump_ppl_dump.x86.exe
    "C:\Users\Admin\AppData\Local\Temp\nanodump_ppl_dump.x86.exe"
    1⤵
      PID:4296
    • C:\Windows\System32\svchost.exe
      C:\Windows\System32\svchost.exe -k netsvcs -p
      1⤵
      • Drops file in System32 directory
      PID:3132

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4296-133-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download