Analysis

  • max time kernel
    58s
  • max time network
    232s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2023 14:23

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe command="C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    dnssec-revoke.exe

  • Size

    84KB

  • MD5

    ea483829510dd441dfa04fd30a0da14a

  • SHA1

    aa923e11ca88e3a275f65baae3fc274c89aac2be

  • SHA256

    585cc4ded7ad1e56620c0902819454d9daccb87b1f1e652de9757f712fea9fbb

  • SHA512

    9203aaae1cb5f4b8db62adf6e231103d1df87b777455ab6ba0e793e2404d7bb346cae5f192c40c1000d42c9262adfdd1288f96eb9937ca182c63100de86754c8

  • SSDEEP

    1536:ENMbrvYTBTVHCUip9Fkb6eIkSZDOZwxHtz59mUnLs:SMGVHX2Fkb6eI7DOZyHtz59mUn

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe
    "C:\Users\Admin\AppData\Local\Temp\dnssec-revoke.exe"
    1⤵
      PID:4612

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4612-0-0x0000000000400000-0x0000000000425000-memory.dmp

      Filesize

      148KB