Analysis

  • max time kernel
    2s
  • max time network
    24s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:23

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe command="C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    named-checkconf.exe

  • Size

    56KB

  • MD5

    14348b9a647b73307d121de49706d298

  • SHA1

    35a7e4b91bcaa283e312c7d8a7e13f6a52f838ea

  • SHA256

    77f94ec064223277601c7c598cb787bfd8a25d8d15fabe3d8433ad34b9bda2c2

  • SHA512

    9b75e637a4d90116f14b2cc25fae2b3b80f9a71eb6606206339c05a53bc8e72ef220740684278337cd6be438b6ebf37b42d28050383fa428d4cf93c6a6cf53b4

  • SSDEEP

    384:tjiAD3QZnD/q6QRw/NmLH3lt6I9ah5ZoQtswUVWnB1Kz8+X5sS7aIFCPxwUbWgTN:rY8KoGB1Kzd6YUGUv83z/UP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe
    "C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe"
    1⤵
      PID:1552

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1552-0-0x0000000000400000-0x000000000041E000-memory.dmp

            Filesize

            120KB