Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    18-07-2023 18:47

General

  • Target

    2752-72-0x0000000000400000-0x000000000046D000-memory.exe

  • Size

    436KB

  • MD5

    59ddee1aa8f59642aba0a86c600149ad

  • SHA1

    7202045ff2ec39d24d2e48f07a1de0c9a1cb7edd

  • SHA256

    51c7daba9cec9dcb856188ccb4eeea801c911591aeecd1b501f571f7cccfec7f

  • SHA512

    9bb007774a87b3d9e0a866070646eec8d9605d9f0a681b44225d11001d21a681d059731efffcb1ef030126cb0f448c943a8b7c4dff2543e28b623e4d1031f77d

  • SSDEEP

    12288:JWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmBcJ:2xgsRftD0C2nKGu

Score
6/10

Malware Config

Signatures

  • Accesses Microsoft Outlook profiles 1 TTPs 3 IoCs
  • Suspicious use of SetThreadContext 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs
  • outlook_office_path 1 IoCs
  • outlook_win_path 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2752-72-0x0000000000400000-0x000000000046D000-memory.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1880
    • C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
      2⤵
      • Accesses Microsoft Outlook profiles
      • outlook_office_path
      • outlook_win_path
      PID:2800

Network

  • flag-us
    DNS
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    Remote address:
    8.8.8.8:53
    Request
    api.telegram.org
    IN A
    Response
    api.telegram.org
    IN A
    149.154.167.220
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    132 B
    4
    3
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    132 B
    4
    3
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    397 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    359 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    tls
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    288 B
    219 B
    5
    5
  • 149.154.167.220:443
    api.telegram.org
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    190 B
    92 B
    4
    2
  • 8.8.8.8:53
    api.telegram.org
    dns
    2752-72-0x0000000000400000-0x000000000046D000-memory.exe
    62 B
    78 B
    1
    1

    DNS Request

    api.telegram.org

    DNS Response

    149.154.167.220

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2800-56-0x00000000000D0000-0x0000000000136000-memory.dmp

    Filesize

    408KB

  • memory/2800-57-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

    Filesize

    4KB

  • memory/2800-58-0x00000000000D0000-0x0000000000136000-memory.dmp

    Filesize

    408KB

  • memory/2800-60-0x00000000000D0000-0x0000000000136000-memory.dmp

    Filesize

    408KB

  • memory/2800-62-0x00000000000D0000-0x0000000000136000-memory.dmp

    Filesize

    408KB

  • memory/2800-63-0x0000000074650000-0x0000000074D3E000-memory.dmp

    Filesize

    6.9MB

  • memory/2800-64-0x0000000004E70000-0x0000000004EB0000-memory.dmp

    Filesize

    256KB

  • memory/2800-65-0x0000000004850000-0x000000000490C000-memory.dmp

    Filesize

    752KB

  • memory/2800-66-0x0000000074650000-0x0000000074D3E000-memory.dmp

    Filesize

    6.9MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.