Analysis

  • max time kernel
    149s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-08-2023 19:38

General

  • Target

    Newlogforshell18_browsingExe.exe

  • Size

    701KB

  • MD5

    26cff833eed7465c4c74580031baf735

  • SHA1

    ae62ddb1deeeda07535e10d90f9d87307b0e11ff

  • SHA256

    ef25f37fb988e1e041e5dbbd6f30aac3918e540fc253964b054fc1ec6e45b6a2

  • SHA512

    8b8f740a945f9728cd077a24a4054d86224ea4c034c80a3377743eaedaa42ce68c8ec690b0be2d58731e729836105858d715897e1e63b509c94157a03a712b73

  • SSDEEP

    12288:/5KggX3QpKzfFmOMExypt/BlM/947f07hfd2wNUO28ux5b:BKHX3eKHc/O4707hfd9NUO2rxp

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Newlogforshell18_browsingExe.exe
    "C:\Users\Admin\AppData\Local\Temp\Newlogforshell18_browsingExe.exe"
    1⤵
    • Drops file in Windows directory
    PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lnk{ABC639CB-7214-6847-E92A-01C142D1F61E}.tmp

    Filesize

    139B

    MD5

    a1f70af558f9d5626f2eef7205524503

    SHA1

    0bd257097a96ca01510e6d1d02bbe72126253b91

    SHA256

    662ab331a058d5b2314f720f7975d853a98a093ebfe2e48769c4f5b82fe2283d

    SHA512

    4b62d69b5ff82ab77cc489d51577e8cb415216eea7f5b6acad442af29e609145fb3b5137bcaa773bf6b4b3f08f83a937fb4cd79d34dfcae727830df3a47a4d95

  • memory/1936-133-0x000001756FF30000-0x000001756FF34000-memory.dmp

    Filesize

    16KB

  • memory/1936-134-0x0000017571740000-0x00000175717B8000-memory.dmp

    Filesize

    480KB

  • memory/1936-136-0x0000017571740000-0x00000175717B8000-memory.dmp

    Filesize

    480KB

  • memory/1936-137-0x0000017571740000-0x00000175717B8000-memory.dmp

    Filesize

    480KB

  • memory/1936-138-0x0000017571740000-0x00000175717B8000-memory.dmp

    Filesize

    480KB

  • memory/1936-141-0x0000017571740000-0x00000175717B8000-memory.dmp

    Filesize

    480KB