Analysis
-
max time kernel
138s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
29/10/2023, 15:32
General
-
Target
nircmd.exe
-
Size
44KB
-
MD5
a1cd6a64e8f8ad5d4b6c07dc4113c7ec
-
SHA1
60e2f48a51c061bba72a08f34be781354f87aa49
-
SHA256
b994ae5cbfb5ad308656e9a8bf7a4a866fdeb9e23699f89f048d7f92e6bb8577
-
SHA512
87a42901a63793653d49f1c6d410a429cabb470b4c340c4553cbd9eccacb38d8543f85455465e0a432d737e950c590175dad744094861f7c3e575446a65b41e8
-
SSDEEP
768:UDR7drWxRrYJAgERvFAREX5DyzaccyOkVDIBF9K/phcanwUaajMIWCW2jsV:2A3cJAgmSRC5DcLxIBLGwUgIW2sV
Score
9/10
Malware Config
Signatures
-
Nirsoft 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\nircmd.exe"C:\Users\Admin\AppData\Local\Temp\nircmd.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112KB
-
Filesize
112KB