3a988e442285b36fb8b471da5ff81bd5d1ef2971fc2f991018bf1d51c98e9a20

Analysis

max time kernel
0s
max time network
9s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 14:03

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\named.exe command="C:\Users\Admin\AppData\Local\Temp\named.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

Report Analysis Logs

General

Target

named.exe
Size

436KB
MD5

548bf850c7dae70d9d6c15aa38130fa3
SHA1

073be4ce456e009501f7a886f8022cf78beb7c61
SHA256

7f0e030044ae89cba464d57448213ad5eec995aca823ed9906e9082cede76d8f
SHA512

bde57a335c810b167c6e0b08e5d32944b0f6e07bb549163e5eb431ca63cd55d017f9216ead8e08a8efea2d47e96c159e970caae3a36c0d2ec99d7da2a2d58344
SSDEEP

6144:ZgiPfP8whdVy/JM6kh2lmM9wopNncgpITJWzQnk7bx:RfP8wveJMlhuao/ncg0WzP7

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\named.exe
"C:\Users\Admin\AppData\Local\Temp\named.exe"
1⤵
PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2496-0-0x0000000000400000-0x0000000000498000-memory.dmp

Filesize
608KB

Download