Analysis
-
max time kernel
3s -
max time network
8s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
07/11/2023, 14:23 UTC
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe
command="C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
dnssec-revoke.exe
-
Size
84KB
-
MD5
44f09856caf1c9f6ff10291c9919a974
-
SHA1
0173691b2fe3911d7298bdcd5f75a5dc81581034
-
SHA256
6babe13e62c99db701dae531ea0ed86f14af066fec4e7485b081ec901e21dd40
-
SHA512
666eb27ad8a1e4b54e09f9987530937690f614a5a201208b837c72d6451f73b4aa9a32b29f3779ac12470e42f47808727cd9cc79f589dd640a7dfbca6ebb465e
-
SSDEEP
1536:P9Bsrwt5P8VLmgMLJ7L4nXOZr0uBX1N5CmUfh1X:PnZgMLJ7IXOZr0uBX75CmUfh1
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe"C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe"1⤵
Network
-
DNS8.8.8.8.in-addr.arpaRemote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle -
DNS208.194.73.20.in-addr.arpaRemote address:8.8.8.8:53Request208.194.73.20.in-addr.arpaIN PTRResponse
-
DNS240.221.184.93.in-addr.arpaRemote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:538.8.8.8.in-addr.arpadns
DNS Request
8.8.8.8.in-addr.arpa
-
8.8.8.8:53208.194.73.20.in-addr.arpadns
DNS Request
208.194.73.20.in-addr.arpa
-
8.8.8.8:53240.221.184.93.in-addr.arpadns
DNS Request
240.221.184.93.in-addr.arpa
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
148KB