Analysis

  • max time kernel
    0s
  • max time network
    4s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2023, 11:49

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\dtdump.exe command="C:\Users\Admin\AppData\Local\Temp\dtdump.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

General

  • Target

    dtdump.exe

  • Size

    79KB

  • MD5

    ebf0f99c71af890986c2689b20e9f9c9

  • SHA1

    6f73479f564b4e7da3cd7e05fbc788ce03685dbe

  • SHA256

    3650ca55e138c5849d089b8cec9d15bdd0dca848d690886a1187fa8c76ce9ade

  • SHA512

    57bc35fe187d5bdef79b185987668774f7fa8bdc90ec89071abf5682a40ee8a9f9786d001ba7832ad2bd33bad209dd7bef40b8f71bd12557699e9a75bd53842a

  • SSDEEP

    1536:5IcOjJT/bpo6rhEhaMSHtVp16TPSOAKqxgjdAO75fh5LeBzvINX5xwjV9:WcOjFS6rhEsnTp8TPVHq+7x9Jx0

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\dtdump.exe
    "C:\Users\Admin\AppData\Local\Temp\dtdump.exe"
    1⤵
      PID:2216

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads