929437f507f93afe723a8cde00a677b3baf841fde99281cb1274a3355b202312

Analysis

max time kernel
6s
max time network
13s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2023, 13:42 UTC

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\dnssec-keyfromlabel.exe command="C:\Users\Admin\AppData\Local\Temp\dnssec-keyfromlabel.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

Report Analysis Logs

General

Target

dnssec-keyfromlabel.exe
Size

92KB
MD5

8054b99daaff13694002c11598eb7dc4
SHA1

57fb3b2525b515cf29c5ada0396ec464288bf1f4
SHA256

95265f9a0808e70ba065da82580966a7384ea7fc24d54c6573fb8dd517cc1904
SHA512

8a35fb6d84f19fb11cad72d846ad02db246e7ebb6940971c8bd978e0774c362960cbb5b99f4f520dd6d58dc66c2a2d9bb7c5799a4bb96cc8dcbb551a4a4ab2a0
SSDEEP

1536:Q7prvo9VyT+ItBzPOkIWcvH2OZBc+2k7mUD9:fAHzPOkIWo2OZ++2k7mUD

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\dnssec-keyfromlabel.exe
"C:\Users\Admin\AppData\Local\Temp\dnssec-keyfromlabel.exe"
1⤵
PID:2816

Network

DNS

2.136.104.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

2.136.104.51.in-addr.arpa

IN PTR

Response
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

2.136.104.51.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

2.136.104.51.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2816-0-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download