644e43a134c7ba21c88d7dc76f6a7df1326f3a3c40a78f96505698a1fbe6e2ed

Analysis

max time kernel
122s
max time network
127s
platform
windows10-1703_x64
resource
win10-20231020-en
resource tags

arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system
submitted
31-10-2023 02:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

DefNotRat.exe
Size

105KB
MD5

c12591a2150583bd138d9583646353eb
SHA1

706dd4217b4df89348c66313f1ddb3cbea0a6349
SHA256

644e43a134c7ba21c88d7dc76f6a7df1326f3a3c40a78f96505698a1fbe6e2ed
SHA512

3bf88c8fb4e8ade8d56c06c37af878e0868bce68dd5a198e866f49fc59ec7513e3341085bb5c98f807509bbc87e9b625510bbb919fc7a2fde05ec4ae4bbe68ab
SSDEEP

48:6K+xdZI/mPAdr/8Oc9o+ijNMXANjbFuzkCtnhLldEqkUEeFLDpfbNtm:HEAaQjA1t1zNt

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\vlone ratted you 74.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 94.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 100.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 122.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 1.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 24.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 31.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 155.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 175.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 84.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 105.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 39.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 44.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 79.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 21.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 117.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 55.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 123.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 134.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 194.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 146.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 172.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 14.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 157.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 176.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 97.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 103.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 45.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 145.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 47.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 163.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 147.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 17.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 65.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 166.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 16.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 85.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 92.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 161.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 71.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 162.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 113.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 173.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 196.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 76.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 144.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 10.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 40.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 80.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 20.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 57.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 99.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 200.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 4.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 46.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 148.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 149.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 91.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 138.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 197.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 23.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 66.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 153.txt	DefNotRat.exe
File created	C:\Program Files (x86)\vlone ratted you 116.txt	DefNotRat.exe

C:\Users\Admin\AppData\Local\Temp\DefNotRat.exe
"C:\Users\Admin\AppData\Local\Temp\DefNotRat.exe"
1⤵
- Drops file in Program Files directory
PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\vlone ratted you 6.txt

Filesize
50KB

MD5
5e64f187163ce360dc8c07b13cee916a

SHA1
725f1a36f9f269f81bf47efa26a4e36c5e171aa0

SHA256
857c395047a11ac0419a1bc3d16b4d0fc8f7938a8625d680878ca798e1032bc1

SHA512
16195317e06c32221c7e8b38ec96163c1117a2298c79e62bd2cef5bbaf3cf45bac21d27fd9eb7ffe583baa04b2e49ddbe638951edc3e532726ca448f403f5382

Download Submit
memory/2272-0-0x0000000000A20000-0x0000000000A40000-memory.dmp

Filesize
128KB

Download
memory/2272-1-0x00000000730D0000-0x00000000737BE000-memory.dmp

Filesize
6.9MB

Download
memory/2272-203-0x00000000730D0000-0x00000000737BE000-memory.dmp

Filesize
6.9MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads