Analysis

  • max time kernel
    45s
  • max time network
    84s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2023 14:33

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe command="C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    named-checkconf.exe

  • Size

    64KB

  • MD5

    1530a3df8921b23fa8a320c290c7fd23

  • SHA1

    9fda5fd4b42620e6b88c627b8203d24c1bdaf395

  • SHA256

    464f56b8ab77406ad6876d61bff783138c78e748f673a163c214dd403e563755

  • SHA512

    400fe773f81e975c17725dd618a78d362cbfc8e6e12356b53c5f453ba94f1428867dba4e2100097fc5eaf18c010bd6dd563094aeff5dcdde6a36fd466e7b5b24

  • SSDEEP

    384:Z7OOQcXlfb92PILy+scViz1/UVyFw6pJ97wj+CF7F7LPEwe2z57ehks6Dh96Fyhk:DDbgYjvFZJxzxehNoj6OGU75s7XzpPP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe
    "C:\Users\Admin\AppData\Local\Temp\named-checkconf.exe"
    1⤵
      PID:784

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/784-0-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB