Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-09-2023 02:32

General

  • Target

    76c77a70b8ff02ec28049a28fdb538a5d663f548b48e9a449371edd4c414a15e.exe

  • Size

    2.9MB

  • MD5

    eafba56f876c04229c33c88a0bd964fa

  • SHA1

    d34f886a895f190c8a2d1bf4e46cbf104358126c

  • SHA256

    76c77a70b8ff02ec28049a28fdb538a5d663f548b48e9a449371edd4c414a15e

  • SHA512

    80e3dc784a25d86a3a63032ab6f66e39484e3c480b4cc94dba2d63f0f9897ac1fcd86482f5c8b078639aba617e35d20c0938c6f58869f4bc4402bc8229d46b21

  • SSDEEP

    49152:AAOdl4d7NHNUb75uEEbOyYWHxL9X5zT/dRSAUA/J:Zl8DFWH1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\76c77a70b8ff02ec28049a28fdb538a5d663f548b48e9a449371edd4c414a15e.exe
    "C:\Users\Admin\AppData\Local\Temp\76c77a70b8ff02ec28049a28fdb538a5d663f548b48e9a449371edd4c414a15e.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\UltraVNC.ini

    Filesize

    1KB

    MD5

    5de738254ad67c06caa5dfd631b2aa7e

    SHA1

    65a9f0dd1f1c83cce7fa1e2fec2f736db55d1c13

    SHA256

    9c44c7330620081b178461c4347ccdb9ed4d2da0629db64fca153c88dc8ec3de

    SHA512

    d620eaee957145b6c9bd887aa6191065619a9da8374b18c25699cf197f703ed2a4c2a2247e8702a2e67e6b4693ce73f391e6d6cd36eac08da581a8483f1b4611